Overview
Built a self-hosted operations platform for teams that need a streamlined deployment experience while retaining control of their servers, domains, and credentials.
The hard part
Coordinating privileged Docker, Compose, SSH, Git, DNS, and ingress operations without allowing HTTP request handlers to execute infrastructure work directly.
The approach
Separated the Rust control plane from background workers and dedicated runtime adapters, with loopback-only serving, encrypted secrets, role-gated controls, and auditable operations.
