For a limited time, use our exclusive coupon code KWINGSMEDIA at checkout and enjoy a special 10% discount on all of our products and services across the entire Kwings Media store
Kwings Media Logo
KWINGS MEDIA
Back to Projects
Multi-Tenant SaaS

WayBuddy

A SaaS platform that lets travel guides and tour operators launch their own branded travel-journal website, edit every page from an admin dashboard, and go live on their own subdomain with SSL — without touching code.

Visit the live site
Loading live preview…

Live preview of travelguide.kwingsmedia.com

Overview

A merchant signs up, pays for a plan, picks a subdomain, and the platform provisions a real, publicly reachable site for them automatically — nginx vhost written and Let’s Encrypt certificate issued within minutes of checkout.

One deployment serves many customer sites. The public site resolves the incoming domain to a tenant on every request and scopes all data access to it, so no query can leak across sites.

What it does

Merchant sign-up & licensing

Email/password or Continue with Google, with a licensed-guide document upload and an admin approval step before a site can go live.

Full content management

Home, about, contact, nav, footer, journal entries, travel packages, transport, customer reviews, a WhatsApp contact widget and colour themes — all editable with a rich-text editor.

Media library

Image uploads to S3-compatible object storage with a reusable picker shared across every content type.

Draft, preview, publish

Edits save as drafts, are viewed in a live preview pane via a signed short-lived token, then publish atomically. Public visitors only ever see published content.

Engineering highlights

Two API surfaces from one codebase

An authenticated admin mount and a public mount, separated by middleware that decides whether a request may see drafts across admin, preview and public content modes.

Defence-in-depth provisioning

The provisioning SSH key is pinned server-side to a forced command, and subdomain labels are validated against a DNS-label pattern and a reserved-name list before ever reaching a shell.

Resilient builds

The public site falls back to bundled JSON snapshots if the API is unreachable, so a build or deploy never hard-fails.

20+ database migrations

Covering multi-tenancy, users, licensing, subscriptions and billing, media, reviews, captcha and the publish workflow.