Quick install
One command on Ubuntu or Debian: Docker, clone, secrets, TLS, database migrations.
Overview
How it fits together
Traefik, Keycloak, PostgreSQL, per-site Nginx + PHP-FPM + MariaDB.
Environment reference
Production .env variables and local development settings.
Troubleshooting
Common SSL, Keycloak, and OIDC issues with fixes.
Features
- Sites — create, start, stop, restart, and delete from the browser
- Isolation — each site gets its own Docker network; optional MariaDB and SFTP
- TLS — Traefik obtains and renews Let's Encrypt certificates
- Auth — Keycloak (OIDC/PKCE), MFA and brute-force protection available in the realm
- Roles — admins manage all users and sites; regular users see only their own
- Observability — server and Docker stats for admins; Traefik dashboard behind OAuth2 Proxy
Tech stack
| Layer | Technology |
|---|---|
| App | React Router 7 (SSR), Node.js 22, Vite 7, Tailwind CSS 4 |
| Panel database | PostgreSQL 17, Drizzle ORM |
| Site databases | MariaDB LTS (one container per site when enabled) |
| Identity | Keycloak 26, openid-client v6 |
| Edge | Traefik v3, OAuth2 Proxy (Traefik dashboard) |
| Orchestration | dockerode (Docker API via host socket) |
The canonical long-form documentation lives in the repository README. This site highlights install, architecture, and operations for reading in the browser.