How does this work?
This web app (Node.js / Express) is the only public-facing service.
It proxies every /api/* request server-side
to the private API (Python / FastAPI).
In Azure Container Apps the API has internal-only ingress —
the internet cannot reach it directly. Only this web app can talk to it.
┌──────────┐ ┌──────────────┐ ┌─────────────┐
│ Browser │──────▶│ Web App │──────▶│ Private API │
│ │ │ (public) │ │ (internal) │
│ │ │ Node.js │ │ Python │
└──────────┘ └──────────────┘ └─────────────┘