Architecture
DevPanel follows a hub-and-spoke model. A central control plane manages one or more remote agents, each running on a separate server.
Browser
User interface
Web
:33000 · Vite + React
API
:33001 · NestJS
Worker
BullMQ
PostgreSQL
State
Redis
Queue
Remote Servers
Agent — Server A
:33002 · Fastify
Agent — Server B
:33002 · Fastify
Agent — Server N…
:33002 · Fastify
Components
Browser dashboard. Communicates with the API over REST and WebSocket for real-time log streaming.
Control plane. Auth, project/service CRUD, domain management, and agent orchestration. Backed by PostgreSQL and Redis.
Background processor for deploys, log streaming, health checks, and certificate renewal.
Lightweight sidecar per server. Receives commands from the API and executes Docker operations via the local Docker socket.
Security model
- ✓All API endpoints require JWT authentication.
- ✓Agent-to-API communication uses a per-server token generated at server creation.
- ✓Environment variables are encrypted with AES-256 at rest in PostgreSQL.
- ✓The Docker socket is never exposed outside the API container.