Blog
Flow Designer
0
GitHub stars
Mẫu Docker Flow
Bản vẽ trống
Chọn
Nối Node
+ Node (Đối tượng)
+ Frame (Khung)
+ Ghi chú
Chú thích (Bật)
85%
Mở file
Xuất GIF / PNG
Ranh giới bản vẽ (1240 × 1080px)
Single Ubuntu VPS
Docker runtime
deploy-proxy
subnet: 172.28.0.0/16
kamal
subnet: 172.29.0.0/16
Kamal-managed app services
app-network (Compose)
Secrets & Environment
Decryption keys stay protected: encrypting files does not remove the need for them.
HTTPS
http://kamal-proxy:80
proxy
port 5432 · internal
SSH Tunnel
Decrypted Env
Deploy Injection
off-server S3 backup
Direct access blocked
Internet / Browser
public HTTPS
Administrator Laptop
private admin access
Cloudflare R2
off-server storage
Nginx Proxy Manager
public reverse proxy
Nginx Proxy Manager
Admin UI · private
Zot Registry
not public
Netdata
not public
Netdata Dashboard
private dashboard
Kamal Proxy
routes to the app
Next.js Application
app container
PostgreSQL
port 5432 · internal
Scheduled Backup Job
runs inside the VPS
Encrypted environment files
values never shown
GitHub Actions Secrets
protected credentials
dotenvx decryption
during the deploy workflow
Kamal runtime configuration
passed to the app container
Example, NPM admin UI only
ssh -L 8081:127.0.0.1:81
deploy@<SERVER_HOST>
http://127.0.0.1:8081
Netdata uses its own tunnel.
CHÚ THÍCH CÁC ĐƯỜNG MẠNG (NETWORK FLOW LEGEND)
Public HTTP/HTTPS traffic
Internal Docker traffic
Private SSH access tunnel
Deployment or secrets flow
Off-server backup transfer
Blocked or not exposed
Search…
⌘
K
Ctrl
K
Command Palette
Search for a command to run...