Workspace/Overview
Live
AN

Sunday, September 27, 2026

Good morning, Alex ✦

Here’s the latest across your production workspace.

Active servers▣
4 +1 this month
Compute usage◒
38% of 16 vCPU
6.1 vCPU used16 vCPU total
Memory allocated▤
12.4 GB of 32 GB
Healthy headroom39% used
Monthly uptime⌁
99.98% +0.04%
Last 30 daysTarget 99.9%

Your servers

Monitor and manage your running workloads.

Recent activity

Changes across your workspace.

Node capacity

Resource distribution by node.

3 healthy
eu-west-01Frankfurt, DE · 2 servers
CPU42%
Memory58%
→
us-central-02Dallas, US · 1 server
CPU26%
Memory31%
→

Quick actions

Common tasks, one click away.

Workspace / Servers

All servers

Manage deployments, resources, and access.

⌕
ServerStatusNodeResourcesUpdated

Workspace / Nodes

Node fleet

Keep an eye on the machines powering your servers.

Workspace / Activity

Activity log

A complete audit trail of workspace events.

EventActorTargetTime

Server / edge-api-prod / Environment

Private environment

Encrypted variables injected only into this server at start.

🔒
Protected environment

Secrets are encrypted at rest and hidden from users without environment.read.

AES-256-GCM

Variables

4 variables · 2 masked secrets

Changes apply after restart

Environment audit

Secret-safe actions for this server.

↥
ENV_IMPORTAlex Nguyen imported 4 variables from .env
Values redacted
✎
ENV_UPDATEAlex Nguyen updated PORT
Value hidden

Admin / Runtime images

Runtime catalog

Versioned Docker templates for predictable server starts.

◈
Templates are admin-managed

Users choose an enabled runtime and version when creating a server. Custom Docker images stay restricted to admins.

ADMIN ONLY

Server / edge-api-prod / Console

Process console

Live stdout and stderr from the selected server process.

⌄
ONLINEedge-api-prod · eu-west-01
server.startserver.restartserver.force_stop
CONNECTEDWebSocket · 42ms
⌕8 lines
›
Auto-scroll ONPermission: console.read · console.command⌁ secrets redacted

Server / edge-api-prod / Files

File manager

Manage files inside this server root. Host paths stay private.

▱/
⌕
⌁ server root locked
⇧
Drop files here to uploadFiles are written through the authenticated agent.
SizePermissionsModified
This folder is empty.
0 selected

Upload queue

Uploads are sent to the authenticated node agent.

Uploading

Admin / Security

Security posture

The public surface is small by design; internal services stay private.

Protected baseline

Request path

Browser-visible endpoints stop at the panel origin.

01Browserpanel.example.com
→
02Reverse proxy / BFFHTTPS · rate limit · CSP
→
03Private backendinternal network only
→
04Node agentmTLS / signed service token
Public surfaceGET /api/*wss://panel.example.com/ws/*No backend hostnames or service tokens

Network exposure

Public ports and protected services.

443
Reverse proxyPublic · TLS + security headers
ALLOW
80
HTTP redirectPublic · redirect to HTTPS
ALLOW
8080
Backend APIPrivate network only
BLOCKED
5432
PostgreSQLInternal Docker network
BLOCKED
6379
RedisInternal Docker network
BLOCKED
✓
Object-level authorizationServer, file, log, backup, and environment access is checked after loading the session.
✓
Private agent channelBrowsers never connect directly to Node Agent or Docker APIs.
✓
Response minimizationDTOs return only fields required by the current view; errors omit internal details.
♧

Team access

Invite collaborators and manage granular server permissions from one place.

⌘

API keys

Connect deployments and automation with scoped, revocable access tokens.