How it works
Security
What spredr protects for you, with nothing for you to set up.
Only what you published runsEvery image is signed from your commit to the machine: nobody can swap it on the way.
Your service, in its boxEach service runs isolated, with its own network: another service cannot see yours.
Encrypted secretsYour variables are stored encrypted and never shown in a terminal. Reading one from the panel is logged.
One door onlyYour service is reached only over https. The machines have no other open port.
Everything is loggedDeploys, changes, sign-ins and refusals, in spredr activity. The log can't be edited or deleted.
Everyone within limitsEach service has its memory and CPU limit, and each account its traffic limit: a neighbour can't go past theirs.
your terminal
Signing in without pasting tokens
spredr login opens a page where you check the code your terminal shows, choose what it may do and for how long. If the request doesn't come from your own network, the page warns you. Every session shows in Activity and spredr logout closes it on the server.