85%
Ranh giới bản vẽ (1240 × 1080px)Single Ubuntu VPSDocker runtimedeploy-proxysubnet: 172.28.0.0/16kamalsubnet: 172.29.0.0/16Kamal-managed app servicesapp-network (Compose)Secrets & EnvironmentDecryption keys stay protected: encrypting files does not remove the need for them.HTTPShttp://kamal-proxy:80proxyport 5432 · internalSSH TunnelDecrypted EnvDeploy Injectionoff-server S3 backupDirect access blockedInternet / Browserpublic HTTPSAdministrator Laptopprivate admin accessCloudflare R2off-server storageNginx Proxy Managerpublic reverse proxyNginx Proxy ManagerAdmin UI · privateZot Registrynot publicNetdatanot publicNetdata Dashboardprivate dashboardKamal Proxyroutes to the appNext.js Applicationapp containerPostgreSQLport 5432 · internalScheduled Backup Jobruns inside the VPSEncrypted environment filesvalues never shownGitHub Actions Secretsprotected credentialsdotenvx decryptionduring the deploy workflowKamal runtime configurationpassed to the app containerExample, NPM admin UI onlyssh -L 8081:127.0.0.1:81deploy@<SERVER_HOST>http://127.0.0.1:8081Netdata uses its own tunnel.CHÚ THÍCH CÁC ĐƯỜNG MẠNG (NETWORK FLOW LEGEND)Public HTTP/HTTPS trafficInternal Docker trafficPrivate SSH access tunnelDeployment or secrets flowOff-server backup transferBlocked or not exposed
Command Palette

Search for a command to run...