Features

Everything DevOps Buddy does today — and what's next.

Deploy

Git deploys with Nixpacks — point at a repository (any branch); the agent clones and builds it on your VM. PHP with composer, Node.js, Python, Go, Ruby, Rust, Java and more are detected automatically — no Dockerfile required.
docker-compose deploys — paste any compose file. Multi-service apps, databases, queues, workers: if it runs in Docker, it deploys. Buddy injects ingress labels and networks at deploy time without touching your file.
Staging clones — one click duplicates an app (code, env, domain config) under a -staging subdomain so you can test before touching production.
Deploy, restart, stop, logs — full lifecycle from the dashboard, executed by the agent in seconds.

Automatic HTTPS — Traefik terminates TLS on every VM with Let's Encrypt certificates, issued and renewed automatically.
Managed DNS — connect a Cloudflare API token and Buddy upserts the A records for your app domains, pointed at the right VM.
Many apps per VM — every app joins a shared ingress network; Traefik routes by hostname, so one cheap VM can serve many sites.

Google Cloud, DigitalOcean, Hetzner, Vultr — add an API token (or a GCP service-account key), pick region and size, and Buddy creates the VM with Docker, Traefik and the agent pre-installed via cloud-init. AWS and Azure are on the roadmap.
Use a server you already have — one curl | bash installs the agent on any Debian/Ubuntu server you already run, wherever it is.
Outbound-only agent — a single ~5 MB Go binary that polls over HTTPS. No SSH keys to share, no open management ports, per-server tokens you can revoke.

Backups to your cloud — app data is archived to a bucket in your own project (GCS today). Transfers use short-lived pre-signed URLs, so storage credentials never reach the VM.
1-click restore — pick any snapshot; the agent stops the app, restores the data and brings it back up.

Server metrics — CPU, memory and disk per VM, refreshed every 20 seconds by the agent heartbeat.
Per-app metrics — container CPU/memory aggregated per app, visible in the app list and detail pages.
Command history — every deploy/restart/backup with stdout, stderr and exit codes kept for auditing.
Optional Zabbix integration — auto-register every VM as a Zabbix host with your template and host group.

Two-factor authentication — TOTP with any authenticator app.
Encrypted credentials — cloud tokens and keys are encrypted at rest; the control plane decrypts them only to execute the operations you trigger.
Isolation — every app is its own compose project with its own containers; nothing shares a runtime.

Streaming logs · zero-downtime deploys · teams & role-based access · audit log · AWS & Azure provisioning · S3-compatible backup targets · one-click templates (WordPress, Ghost, n8n, Plausible) · usage-based billing (per server + per app, hourly).