Stars
Forks
Watchers
Developer links
Sencho
With over 430 GitHub stars and designed for DevOps engineers, platform teams, and homelab operators, Sencho is the self-hosted Docker Compose control plane that gives you a real operational cockpit without abandoning file-on-disk compose workflows. The web dashboard provides live CPU, memory, and disk sparklines per container, one-click start/stop/restart controls, and a Monaco-powered YAML editor with syntax highlighting, inline diff, and one-click rollback. Compose files remain the source of truth on the host filesystem. Multi-node management connects remote Sencho instances via authenticated HTTP and WebSocket proxy using long-lived API tokens, with no SSH access or exposed Docker sockets required. The Pilot Agent establishes an outbound-only WebSocket tunnel for nodes behind NAT, CGNAT, or strict firewalls. Blueprints define compose intent once and deploy it across label-targeted nodes, with drift detection keeping the fleet aligned. Fleet Federation provides cordon and pin controls for maintenance windows, while Fleet Actions execute bulk deploy, stop, and restart operations by stack label across the entire infrastructure. The security suite includes Trivy vulnerability scanning, deploy enforcement policies, SARIF and SBOM export, and Fleet Sync to replicate scan policies across replicas. Additional capabilities include 199+ one-click app templates, Git source integration, atomic deploys with auto-rollback, auto-heal, scheduled operations, webhooks, and custom S3 off-site backups to MinIO, R2, B2, or AWS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Benefits
- Compose Files Stay On Disk
- Your docker-compose.yaml files remain the source of truth on the host filesystem. Sencho reads and manages them without importing into a proprietary database or format.
- Multi Node Without SSH
- Connect remote instances via authenticated HTTP proxy and API tokens. No SSH tunnels, no exposed Docker sockets, and the Pilot Agent handles NAT and CGNAT traversal.
- Blueprint Fleet Orchestration
- Define compose intent as a Blueprint, target labeled nodes, and let drift detection keep every instance aligned. Federation provides cordon and pin controls for maintenance.
- Integrated Security Scanning
- Trivy vulnerability scanning with deploy enforcement policies, SARIF and SBOM export, CVE suppression management, and automatic Fleet Sync replication across all nodes.
Features
- Monaco YAML Editor
- Syntax-highlighted compose editor with inline diff, one-click rollback, integrated streamed logs, built-in terminal, and environment variable management in a single view.
- Fleet View Dashboard
- Monitor every node with health metrics, container counts, and resource usage in grid or topology layout with search, filtering, and drill-down capabilities.
- Pilot Agent Tunnel
- Outbound-only WebSocket tunnel from remote nodes back to the control plane, requiring no inbound ports or port forwarding for NAT and CGNAT environments.
- App Templates Library
- Over 199 one-click application templates plus Git source integration for deploying common stacks with pre-configured compose definitions.
- Atomic Deploy Safety
- Atomic deploys with automatic rollback on failure, auto-heal for crashed containers, scheduled operations, and webhook triggers for CI/CD integration.