Documentation.
Start with the installer, then read how a deploy actually runs. Everything else is reference for when you need it.
$
curl -fsSL https://ninedeploy.com/install.sh | bashStart
Core
- Deploy pipelineTrigger → claim → build → healthcheck → flip → retire.
- Workspaces & RBACMulti-tenant workspace isolation and role-based permissions.
- Tags: Projects, Workspaces & LabelsThree independent dimensions a service can belong to at once.
- Volumes & StoragePer-service volume attachments, and snapshot/restore for any managed volume.
- The .ninedeploy manifestCommit build, runtime, routing and storage config next to the code.
- Private repos, sources & webhooksEncrypted credentials, server-generated deploy keys, auto-deploy hooks.
- Managed databases11 managed engines including PostgreSQL, KeyDB and Dragonfly, with encrypted backups and node placement.
- Multi-server & NodesNode workloads, Nixpacks/Railpack builds, volumes, databases and optional Swarm.
- Ingress, SSL & TunnelsTraefik reverse proxy, Let's Encrypt certificates, and Cloudflare Tunnels.
- Alerts & NotificationsSustained breach metric monitoring and multi-channel alerting.
- GitHub AppsShort-lived installation tokens, signed webhooks and deployment feedback.
- Traffic analyticsOpt-in request, status and latency charts from Traefik.
- Database access & importsPublish selected databases and import dumps with a safety backup.
- Build placement & image transferBuild where the workload runs, on the panel or on a dedicated build server.
- Docker SwarmOpt-in orchestration for Docker services, with rolling updates and replicas.
Security
- Security, SSO & PasskeysWebAuthn, OIDC Single Sign-On, TOTP 2FA, brute-force lockout, and AES-256 key rotation.
- External secret managersResolve Vault / OpenBao and AWS Secrets Manager at deploy time.
- Git SSH host-key pinningRemember a Git host's SSH keys across panel deploys and refuse unexpected changes.