Skip to content
PAUIOps
Open menu

PAUIOps Manager · 100% free

The secure operations layer installed on each managed server.

Run controlled Git, Docker, Nginx, file, terminal, and maintenance workflows on one server. No monthly subscription, trial period, server fee, or feature lock.

Download ManagerRead deployment guide
PAUIOps Manager logo

Server-local by design

The action stays close to the machine.

Manager is a Go backend and embedded web interface. It connects to the local Docker Engine, approved project folders, Git working trees, and only the privileged service actions an administrator deliberately configures.

Remote-aware Git safety

Fetch current state, repair configured HTTPS credentials when needed, and guide synchronization without destructive recovery.

Compose collision & recovery

Expose declared cross-project host-port overlap, then opt projects into bounded monitoring and repair.

Validated Nginx routing

Apply or remove administrator-approved reverse-proxy routes through one exact privileged action.

Role-aware terminal

Full PTY for admins; approved operations for non-admins.

Project files

Browse and edit assigned repositories within path boundaries.

Lifecycle & diagnostics

Separate degraded features from fatal failures, and restore the prior Manager binary when an upgrade cannot become ready.

Latest Manager improvements

Safer Git, clearer ports, and a controlled edge route.

The latest Manager work repairs configured Git credentials on demand, exposes declared Compose port collisions, keeps bounded service recovery, and adds an administrator-only Nginx provisioning path.

Product source review · August 7, 2026

Reviewed against the current Manager source. The Download page remains authoritative for the published stable build, currently 1.3.4.

Compose port planning

See declared host-port collisions before they become a confusing runtime failure.

Manager compares the resolved Compose port bindings across projects visible to the current user and reports collisions in the Terminal and Files workspaces.

  • Show the conflicting projects, services, Compose files, protocol, host binding, and published port.
  • Treat compatible wildcard and specific-address bindings as conflicts when they compete on the same host port.
  • Mark the scan incomplete when a visible Compose file cannot be read or resolved.

Safety boundary: This is a declared Compose configuration scan, not an operating-system socket scan. An incomplete scan stays visible, and PAUIOps does not rewrite ports automatically.

Git pull + push

Remote-aware synchronization before PAUIOps recommends an action.

Pull and push preflight now fetches the primary remote first, then reports changed files, ahead/behind counts, missing upstream state, and the requested sync direction from fresh information.

  • Commit, synchronize, and push local work through one reviewed path.
  • Stash tracked and untracked work, synchronize history, then restore it.
  • Restore a missing upstream for an existing remote branch or publish a new branch with upstream tracking.

Safety boundary: Automatic sync follows fetch → inspect → fast-forward or rebase → push. It never force-pushes, resets, cleans, discards work, or guesses conflict resolution.

HTTPS Git credentials

Fresh, host-scoped Git credentials on every command — no on-disk store, no restart.

Every Git invocation — admin terminal, non-admin terminal, command presets, and the structured Git API — now authenticates through a host-scoped git config header computed fresh from PAUIOPS_GIT_USERNAME/PAUIOPS_GIT_PASSWORD on each command, replacing the retired startup-seeded credential store.

  • Pick up a rotated token or an edited .env on the very next command, with no service restart required.
  • Authenticate git pull, fetch, push, and ls-remote from non-admin terminal sessions, which previously had no working credential path at all.
  • Get a clear, actionable error naming the missing variable or a PAUIOPS_GIT_HOST mismatch instead of a generic credential failure.

Safety boundary: No credential file is ever written to disk, and the injected header is scoped to PAUIOPS_GIT_HOST so it is sent only to the configured remote and only for the network subcommands that need it — every other git subcommand a non-admin can run, including config --list, never sees it.

Interactive terminal

Type directly into a real PTY — no separate command box.

The Shell page and Files workspace terminal removed the command input box entirely. Administrators type straight into the interactive PTY, while non-admin sessions get a local line discipline — prompt, echo, backspace, history, Ctrl+C/U/W/L — that still enforces the same project git/docker validation as before.

  • Use bash-native tab completion, arrow history, Ctrl+R, and full-screen programs like vim or htop in the admin terminal.
  • Cancel a running non-admin command or a pending line with Ctrl+C, exactly like a real shell.
  • Open the current project as a full Code Editor workspace directly from the terminal header.

Safety boundary: Non-admin isolation from global git config is unchanged, and every submitted line still passes the existing project access, git/docker validation, and pull preflight — only the input surface changed.

Per-project command presets

Quick-command buttons come from the project's own commands.md, not global config.

Preset buttons are now parsed from a commands.md file (or git-commands.md / docker-commands.md) at the project root instead of the removed PAUIOPS_GIT_PRESETS_JSON and PAUIOPS_BUTTON_PRESETS_JSON environment variables. Clicking a preset opens a confirmation dialog with the exact command before it runs.

  • Group buttons under headings and label them from a comment or the paragraph above the fenced command; mark a command as needing input with {{input}}.
  • Get a starter commands.md auto-created the first time a project has none of the three files, never overwriting an existing one.
  • Review the exact resolved command in a confirmation dialog, with one-click copy, before it runs.

Safety boundary: Parsing is capped at 256 KB and 60 buttons, symlinked commands files are refused, and every preset still enforces the caller's project access before execution.

Project Compose watcher

Opt-in auto-start and service-level recovery for each project.

An administrator can enable Auto-start / restart from the Published ports panel. The policy persists per project, reconciles immediately when Manager starts, and monitors the services resolved from that project’s Compose configuration.

  • Detect missing, stopped, exited, dead, paused, unhealthy, or restart-looping services.
  • Detect Compose network drift and probe published TCP ports when no healthcheck exists.
  • Ignore scale-zero services, successful one-time jobs, and services labeled pauiops.watch: ignore.

Safety boundary: The watcher is disabled per project by default. Turning it off changes only the saved policy and never stops containers that are already running.

Recovery controls

Targeted repair escalates carefully and stops at a circuit breaker.

Recovery starts with the affected service, observes consecutive failures, uses cooldown and exponential backoff, and escalates only when earlier attempts do not restore the project.

  • Repair dependencies before dependants and suppress collateral restart work.
  • Surface the affected services, incident time, attempt level, next retry, and last result.
  • Stop automatically at Manual fix needed when the recovery budget is exhausted.

Safety boundary: Automatic recovery can use only up, restart, and unpause. Down, remove, kill, volume deletion, and prune operations are outside the watcher’s command set.

Nginx administration

Apply or remove a validated reverse-proxy route through Manager.

A Manager administrator can invoke the embedded Ubuntu Nginx provisioner through a structured API request or the service CLI, including one or more HTTP(S) upstreams, a certificate email, and an upload limit. A scoped non-admin user can apply a domain within their assigned base-domain access.

  • Reject unsafe domains, upstream credentials, fragments, mixed-protocol pools, invalid ports, and unknown request fields.
  • Use the installer-managed binary path and refreshed sudo policy for the exact privileged Nginx service action.
  • Restore a removed configuration file when Nginx validation or reload fails during deletion.
  • Avoid the recurring "Another instance of Certbot is already running" failure: renewal need is now a local certificate-expiry check, a genuine certbot run retries through lock contention, and domain operations are serialized per Manager.

Safety boundary: Full administration (registering base domains, deleting configurations) remains administrator-only. Non-admin apply requests are accepted only inside that user's assigned base-domain scope and are re-checked server-side on every request, never trusted from the UI alone. The embedded provisioner targets Ubuntu with systemd and apt, changes host Nginx, packages, certificates, ports 80/443, and files under /etc; use staging, DNS readiness, backups, and an infrastructure change window.

Default port 51800

One command to install or update.

The reviewable POSIX installer inventories dependency versions, explains any stable-package changes before approval, verifies the Manager release checksum, preserves configuration, and rolls back an update that cannot become ready.

See every installation step
Quick install or update
curl -fsSL https://pauiops.kpa.ph/install.sh | sh
Preview dependency and Manager changes
curl -fsSL https://pauiops.kpa.ph/install.sh | sh -s -- --dry-run
Inspect first
curl -fsSLo pauiops-install.sh https://pauiops.kpa.ph/install.sh
less pauiops-install.sh
sh pauiops-install.sh

The complete free product

Manager is not a limited edition.

Its full current feature set is downloadable and installable on every supported server without a Center subscription. It may be used alone indefinitely. PAUIOps does not claim Manager is open source unless a separate license confirms that.

Administrator responsibility

Server hardening still matters.

Protect TLS, firewalls, backups, service files, runtime-user home, database credentials, provider tokens, and Docker access. Manager reduces routine SSH exposure; it does not make infrastructure risk disappear.

Start with the hosted operations center

Create your account, choose a server plan, and connect your Managers.

Create Center AccountInstall Manager Free