Introduction
A safe, single-owner control plane for one self-managed Ubuntu host.
What Dashboard Portal is
Dashboard Portal lets the owner of one Linux server connect trusted Git repositories, deploy applications, attach domains, obtain Let’s Encrypt certificates, and inspect host activity from one dashboard.
It is designed for a single self-managed Ubuntu host—not shared hosting, a multi-tenant platform, a DNS provider, a file manager, or a multi-server orchestrator.
How it works
| Layer | Responsibility |
|---|---|
| Dashboard | Runs as an unprivileged service account and stores desired state, audit data, and encrypted values in SQLite. |
| Privileged helper | Receives a small allowlist of validated operations over a local Unix socket for host changes. |
| Project runtime | Runs as a dedicated project Unix user (Native) or as a controlled Docker Compose project. |
| Nginx and Certbot | Serve public traffic, validate Nginx before reloads, and issue TLS after DNS preflight. |
What is available now
- Native Node.js and Bun projects, plus trusted Docker Compose projects.
- Repository sync, selectable branch, repository subdirectory, encrypted environment values, candidate health checks, rollback, logs, and activity audit events.
- Managed domains, Nginx validation and rollback, and Certbot TLS.
- Host readiness, metrics, Setup tool installation, database connector checks, Monitor Logs Tokens, deployment notifications, and signed Portal update checks.
Important trust boundary
A repository is owner-trusted code. Portal does not offer a browser terminal or a generic “run command” API. Docker Compose policy blocks privileged containers, host network/PID/IPC namespaces, and host bind mounts, but it is not a sandbox for hostile images or Dockerfiles.
Last audited: 2026-08-25
Portal source of truth