A platform for a medical clinic, from architecture to production

Context

Unipraxis — a clinic needed its own system for appointments, patient records, role-based access and invoicing, instead of a patchwork of spreadsheets and separate tools.

Problem

Medical data could not leave for an external service, and clinic staff had very different access needs: front desk, doctor, administrator. One mistake in the permission matrix meant exposing sensitive records to people with no business seeing them.

What I did

1. 01Two-tier architecture: a Next.js interface and a NestJS API, with MariaDB on the clinic’s own server
2. 02Role-based permission matrix, verified module by module
3. 03Containerised on the clinic’s own infrastructure, with no data in public cloud
4. 04A repeatable build, deploy and backup procedure, documented for the clinic