Tomáš DvořákandDevin
32b52d121f
* fix: e2e QA hardening — honest runtime URLs, health, and read-only anon UI Backend: - managed DB provisioning: attach DB containers to the platform network and probe the container IP, fixing the 127.0.0.1 reachability failure inside the backend container; log provisioning failures - stop fabricating connection URLs when provisioning produced none - template deploys now carry port + health_check into service runtime fields - service health probed over the project network (backend joins it) instead of an in-container wget that fails on shell-less images - runtime/public/connection URLs rewrite loopback to the request Host so links are usable for LAN/remote clients Frontend: - service Networking panel shows real runtime URLs/ports/health instead of hardcoded containr.dev + 8080->443 - anonymous views hide all mutation controls (new project, add service, group, context menu) - project cards: remove decorative svcN labels; badge says DOWN only when zero services run, IDLE when empty, DEGRADED for partial - mobile projects header no longer clips (fluid search width) - unknown routes render a not-found page instead of silently redirecting Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix: telemetry scope label, chunk split, remove stale vite artifacts - /system/host now reports scope=host|docker-desktop-vm and the daemon OS; Projects dashboard labels cards VM.* when the daemon is a Desktop VM so memory/core numbers aren't mistaken for physical host values - manualChunks: split @xyflow/react and recharts out of the main bundle; removes the >1MB chunk warning - drop tracked vite.config.js/.d.ts build artifacts that shadowed the real vite.config.ts Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com> * fix: persist service host port; demo-data scope for telemetry Public URLs were ephemeral: every restart/redeploy rebound a random host port, so endpoint links rotted. Persist published_port on the service and prefer it for replica 0 on create. If the port is taken, fall back to ephemeral and repersist the new assignment. Post-start the binding is verified — Docker Desktop accepts a conflicting publish silently, which previously left services running with no endpoint at all. demo-data.ts gains the required scope field for HostMonitoring (CI fix). Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com> --------- Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Containr
Self-hosted platform for deploying and managing containerized services. Railway-style project canvases on your own hardware.
Quick Start • Screenshots • Features • Guides • Contributing
Containr is an open-source control plane for Docker. Create a project, drop services onto a visual canvas, wire them together with environment variables, and deploy — no Kubernetes, no cloud bill. Services appear as nodes with auto-inferred connections; logs, metrics, builds, and rollbacks are one click away.
The platform doubles as a public showcase: visitors browse approved projects and the template catalog without an account, while owners manage everything behind sign-in and a platform admin approves, curates, and moderates from a dedicated console.
Screenshots
| Projects dashboard | Project canvas |
|---|---|
 |
 |
| Service detail | Managed databases |
|---|---|
 |
 |
Features
- Project canvas — visual service topology, groups, drag/drop, auto-inferred connections, right-click lifecycle actions
- Public project catalog — approved projects are browsable anonymously; new projects stay private until an admin approves them
- Admin console (
/admin) — platform stats, project approval/edit/delete, user admin management - Private networking — every project gets an isolated Docker network; services reach each other by name (
web:3000) and share variables via${{service.KEY}}references - Deployments & builds — Docker deploys with history, image rollback, live build status
- Runtime — replicas, published ports, domains, health checks, restart policies; start/stop/restart/redeploy from canvas or service page
- Git integration — GitHub, GitLab, Bitbucket, Gitea; webhooks, GitHub App
- Managed databases — create PostgreSQL, MySQL, MariaDB, MongoDB, Redis, Dragonfly, or ClickHouse directly from
/databases, with backup/restore - Template catalog — 30 official templates (NocoDB, Plausible, MinIO, n8n, …) plus user-defined templates with JSON upload and owner-scoped edit/delete
- Metrics — per-service Docker stats plus host CPU/memory/disk telemetry
- HA & scaling — failover policies, node agents, autoscaling rules
- Auth & security — Better Auth sessions (email/password self-hosted), audit logs, vulnerability scans
- Integrated docs — searchable documentation rendered in-app on the landing page and
/docs; syncs from GitHub, falls back to a bundled snapshot offline - Networking — Traefik reverse proxy, optional Cloudflare Tunnel
Access model
| Audience | Can do |
|---|---|
| Anonymous | Browse approved projects, services, templates, databases, HA status, docs |
| Signed-in user | Create/manage own projects, services, databases, templates; view own logs, variables, builds, deployments |
| Admin | Everything above plus project approval/moderation, user admin flags, HA manager controls, agent tokens, platform settings |
Logs, variables, exec consoles, and database connection URLs are never public — they require owner, member, or admin access regardless of a project's public visibility.
Quick Start
Requires Docker with the Compose plugin, openssl, and curl:
curl -fsSL https://raw.githubusercontent.com/Dvorinka/Containr/main/install.sh | bash
Installs into ./containr, generates secrets, pulls the published :latest
images, and starts the stack — UI at http://localhost:3000, API at
http://localhost:8082. Non-interactive; re-runs never overwrite .env.
The platform admin is provisioned at startup from environment variables:
ADMIN_EMAIL=[email protected]
ADMIN_PASSWORD=<generated> # keep in a local untracked file
ADMIN_NAME=Your Name # optional
Both the local account and the Better Auth session account are created, so
either sign-in path works. Without ADMIN_*, the first registered account
becomes owner; registration then closes automatically. The owner can reopen
it and configure a Cloudflare Tunnel token under Settings → Platform —
in-app values override env vars.
Override install defaults with env vars:
curl -fsSL https://raw.githubusercontent.com/Dvorinka/Containr/main/install.sh | \
HTTP_PORT=8080 CONTAINR_DIR=/opt/containr bash
CONTAINR_VERSION pins a release tag, CONTAINR_REF selects the git ref for
downloaded files, CONTAINR_BUILD=1 builds from source. From a git checkout,
./install.sh installs in place; plain docker compose up -d pulls the same
images (--build to compile locally).
Local development and self-hosted deployment (Traefik + Cloudflare Tunnel):
see docs/guides/ and infra/docker-compose.yml.
Architecture
app/frontend/ React 19 + Vite + TypeScript + Tailwind + React Flow
app/backend/ Go API (Gin) · PostgreSQL · Dragonfly · Docker SDK · Better Auth sidecar
infra/ Self-hosted compose: Traefik + Cloudflare Tunnel
docs/ Guides, OpenAPI spec, design documents
All configuration is via environment variables — see .env.example. Never
commit .env or .env.prod; keep generated admin credentials in a local
untracked file (e.g. admin-credentials.local). If a secret was ever
committed, rotate it.
Documentation
- In-app: the landing page and
/docsrender searchable docs — synced from this repository, with a bundled snapshot so they are never blank offline - docs/guides/ — setup, deployment, Cloudflare, autoscaling
- docs/api/openapi.yaml — API contract
- docs/developers/onboarding.md — contributor onboarding
make help— common tasks
Contributing · Security · MIT License © 2026 Tomas Dvorak