ad4687660c
Make the automated pipeline the documented "setup moving forward" and finish scrubbing the last stale GitHub-Actions/racknerd1 references that never reached main. - HANDOFF.md: refresh the stale 2026-06-21 snapshot. New "CI/CD & deploy" section (push to main -> build + push to registry.snsnetlabs.com -> auto-deploy to racknerd2 over SSH, SHA-pinned, /api/health gate), racknerd2 validation-host + SSH-tunnel access notes, Forgejo workflow rule, and a current Deployment + orientation section. - .kiro/steering/project-guide.md: Forgejo-only Git workflow (no gh), CI/CD row, registry host, racknerd2 + forgejo-runner SSH entries, and a CI/CD pipeline section. - .kiro/hooks/tunnel-racknerd2-8080.kiro.hook: the "View ArchNest on racknerd2" hook (ssh -L 8080:localhost:8080 -N) to view the deployed site at http://localhost:8080 (racknerd2's edge only allows port 22). - src/pages/Settings.tsx: About panel repo URL -> Forgejo. - .dockerignore: .github -> .forgejo. - TERMIX_MIGRATION.md / docs/OPEN-SOURCE-RELEASE.md: drop stale .github/workflows + "GitHub Actions deploy" references. Co-authored-by: Samuel James <ssamjame@amazon.com> Co-authored-by: Kiro <noreply@kiro.dev> |
||
|---|---|---|
| .forgejo/workflows | ||
| .kiro | ||
| agent | ||
| assets | ||
| backend | ||
| deploy | ||
| docs | ||
| infrastructure | ||
| pics | ||
| public | ||
| scripts | ||
| src | ||
| .dockerignore | ||
| .env.example | ||
| .gitignore | ||
| design-decisions.md | ||
| docker-compose.yml | ||
| Dockerfile | ||
| eslint.config.js | ||
| HANDOFF.md | ||
| homarr-bookmarks-import.json | ||
| index.html | ||
| nginx.conf | ||
| package-lock.json | ||
| package.json | ||
| README.md | ||
| ROADMAP.md | ||
| TERMIX_MIGRATION.md | ||
| tsconfig.app.json | ||
| tsconfig.json | ||
| tsconfig.node.json | ||
| vite.config.ts | ||
ArchNest
A multi-tenant SaaS platform for infrastructure management — SSH terminal, Docker management, remote desktop, host metrics, file management, and 9 real integration adapters from a single browser interface. Developer-first alternative to enterprise RMM tools, starting at $2.50/month.
Pricing
| Starter | Pro | Team | |
|---|---|---|---|
| Monthly | $2.50/mo | $4.25/mo | $12/mo |
| Annual | $25/yr | $45/yr | $95/yr |
| Hosts | 50 | 125 | Unlimited |
| Users | 5 | 50 | 200 |
| Remote Desktop | — | ✓ | ✓ |
| SSO | — | — | ✓ |
Features
SSH Suite — Terminal (multi-tab, split panes, persistent sessions), tunnels (local/remote/SOCKS5), SFTP file manager, host-to-host transfer, host metrics (5s polling), jump-host chaining, tmux, certificate auth (OPKSSH).
Docker — Management via TCP API, CLI over SSH, or push agent. Container actions, logs, interactive exec, detail views.
Remote Desktop — RDP/VNC/Telnet via Guacamole (Pro+).
Integrations — Proxmox, Docker, AWS, Cloudflare, NetBird, Uptime Kuma, Weather, SSH, Remote Desktop. All real, no mocks.
Bookmarks — Categorized hub with favorites, link health, full CRUD.
Auth — Cognito (OIDC/SAML SSO for Team), MFA, multi-user roles, audit log.
4 Themes — ArchNest Dark, Midnight Blue, Forest, Light.
Architecture
Hybrid: Akamai Cloud for compute, AWS for managed services.
| Layer | Provider | Service |
|---|---|---|
| Compute | Akamai | G7 Dedicated (4GB, ARM) |
| Load Balancer | Akamai | NodeBalancer |
| Frontend | Akamai | Object Storage |
| Database | Self-managed | PostgreSQL (RLS) |
| Cache | Self-managed | Redis |
| Auth | AWS | Cognito |
| Secrets | AWS | Secrets Manager |
| Storage | AWS | S3 |
| DNS | AWS | Route 53 |
| AWS | SES |
Infrastructure cost: ~$66.50/month at 50 users. Scales to full AWS (Fargate + Aurora) at 100+ users / $500+ MRR.
See docs/aws-architecture/system-design.md
for the full system design with diagrams, cost analysis, tier enforcement,
and scale-up path.
Tech Stack
Frontend: React 19, Vite 8, TypeScript, Tailwind CSS v4, React Router, Recharts, Lucide React, xterm.js
Backend: Fastify 5, TypeScript, PostgreSQL, Redis, zod, ssh2
Auth: AWS Cognito (OIDC/SAML SSO, MFA, PKCE)
CI/CD: Forgejo Actions → Docker → Akamai VM deploy
Development
npm install && npm run dev # frontend
cd backend && npm install && npm run dev # backend
Type-check before committing:
npm run build # frontend
cd backend && npx tsc --noEmit # backend
Documentation
| File | Content |
|---|---|
docs/aws-architecture/system-design.md |
Full architecture, costs, tier enforcement |
design-decisions.md |
Visual conventions + per-page notes |
HANDOFF.md |
Current state, workflow rules |
ROADMAP.md |
Deferred/tiered work |