00fc3ceed3
The Forgejo container registry now lives on a dedicated unproxied
(DNS-only) host, registry.snsnetlabs.com, so large image layers bypass
Cloudflare's ~100 MB request-body cap (the backend image's 262 MB and
317 MB layers previously hit 413 Payload Too Large through the proxied
forgejo.snsnetlabs.com host). The web UI / packages list stays on
forgejo.snsnetlabs.com behind Cloudflare Access SSO.
- build.yml: REGISTRY -> registry.snsnetlabs.com
- deploy/docker-compose.yml: image refs -> registry.snsnetlabs.com
- deploy/README.md: push/pull/login host -> registry.snsnetlabs.com
(packages web UI URL kept on forgejo.snsnetlabs.com)
Also record the versioning convention in HANDOFF + steering: development
happens on even major versions, releases on odd; currently developing v2
(prior released line is v1, see the v1.0 git tag). package.json and the
About panel are not yet bumped to v2.
Validated end to end: built both images on the runner host, pushed to
registry.snsnetlabs.com (backend included, no 413), pulled on racknerd2,
brought the stack up, /api/health returns {"ok":true} over the mesh IP.
Co-authored-by: Samuel James <ssamjame@amazon.com>
Co-authored-by: Kiro <noreply@kiro.dev>
|
||
|---|---|---|
| .forgejo/workflows | ||
| .kiro | ||
| agent | ||
| assets | ||
| backend | ||
| deploy | ||
| docs | ||
| infrastructure | ||
| pics | ||
| public | ||
| scripts | ||
| src | ||
| .dockerignore | ||
| .env.example | ||
| .gitignore | ||
| design-decisions.md | ||
| docker-compose.yml | ||
| Dockerfile | ||
| eslint.config.js | ||
| HANDOFF.md | ||
| homarr-bookmarks-import.json | ||
| index.html | ||
| nginx.conf | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||
| ROADMAP.md | ||
| TERMIX_MIGRATION.md | ||
| tsconfig.app.json | ||
| tsconfig.json | ||
| tsconfig.node.json | ||
| vite.config.ts | ||
ArchNest
A multi-tenant SaaS platform for infrastructure management — SSH terminal, Docker management, remote desktop, host metrics, file management, and 9 real integration adapters from a single browser interface. Developer-first alternative to enterprise RMM tools, starting at $2.50/month.
Pricing
| Starter | Pro | Team | |
|---|---|---|---|
| Monthly | $2.50/mo | $4.25/mo | $12/mo |
| Annual | $25/yr | $45/yr | $95/yr |
| Hosts | 50 | 125 | Unlimited |
| Users | 5 | 50 | 200 |
| Remote Desktop | — | ✓ | ✓ |
| SSO | — | — | ✓ |
Features
SSH Suite — Terminal (multi-tab, split panes, persistent sessions), tunnels (local/remote/SOCKS5), SFTP file manager, host-to-host transfer, host metrics (5s polling), jump-host chaining, tmux, certificate auth (OPKSSH).
Docker — Management via TCP API, CLI over SSH, or push agent. Container actions, logs, interactive exec, detail views.
Remote Desktop — RDP/VNC/Telnet via Guacamole (Pro+).
Integrations — Proxmox, Docker, AWS, Cloudflare, NetBird, Uptime Kuma, Weather, SSH, Remote Desktop. All real, no mocks.
Bookmarks — Categorized hub with favorites, link health, full CRUD.
Auth — Cognito (OIDC/SAML SSO for Team), MFA, multi-user roles, audit log.
4 Themes — ArchNest Dark, Midnight Blue, Forest, Light.
Architecture
Hybrid: Akamai Cloud for compute, AWS for managed services.
| Layer | Provider | Service |
|---|---|---|
| Compute | Akamai | G7 Dedicated (4GB, ARM) |
| Load Balancer | Akamai | NodeBalancer |
| Frontend | Akamai | Object Storage |
| Database | Self-managed | PostgreSQL (RLS) |
| Cache | Self-managed | Redis |
| Auth | AWS | Cognito |
| Secrets | AWS | Secrets Manager |
| Storage | AWS | S3 |
| DNS | AWS | Route 53 |
| AWS | SES |
Infrastructure cost: ~$66.50/month at 50 users. Scales to full AWS (Fargate + Aurora) at 100+ users / $500+ MRR.
See docs/aws-architecture/system-design.md
for the full system design with diagrams, cost analysis, tier enforcement,
and scale-up path.
Tech Stack
Frontend: React 19, Vite 8, TypeScript, Tailwind CSS v4, React Router, Recharts, Lucide React, xterm.js
Backend: Fastify 5, TypeScript, PostgreSQL, Redis, zod, ssh2
Auth: AWS Cognito (OIDC/SAML SSO, MFA, PKCE)
CI/CD: Forgejo Actions → Docker → Akamai VM deploy
Development
npm install && npm run dev # frontend
cd backend && npm install && npm run dev # backend
Type-check before committing:
npm run build # frontend
cd backend && npx tsc --noEmit # backend
Documentation
| File | Content |
|---|---|
docs/aws-architecture/system-design.md |
Full architecture, costs, tier enforcement |
design-decisions.md |
Visual conventions + per-page notes |
HANDOFF.md |
Current state, workflow rules |
ROADMAP.md |
Deferred/tiered work |