Mycelium
The garden’s own control room. One private portal deploys, watches, and backs up every app backend and this website on the garden’s server. Like the fungal network under a forest floor, it stays out of sight: it has no public address, and only devices on the garden’s private network can find it.
What it does
- Deploy each project from git, follow the output live, and roll back when something goes wrong.
- Edit environment variables with a diff before saving, and watch containers, logs, and server health.
- Encrypted offsite backups of every database and project, with a step-by-step restore guide.
- Manage websites, certificates, and files without opening a terminal.
- Security checks for the server and container images, with alerts to a phone.
- Passkey sign-in only, a server agent limited to a fixed list of actions, and a tamper-evident audit log of everything done.
How it works
- Phone or laptop
- Private network
- Portal, with passkey sign-in
- Server agent
- Apps, databases, and backups
Built with
- Go
- Next.js
- SQLite
- Headscale
- Docker
- nginx
- age
To run it
For now it runs only the bee n moss server, and its code is private.
Leaving the glass
A public, free, open-source version (AGPL-3.0) that sets up and runs any Ubuntu or Debian server is planned. First, everything specific to this garden comes out, and a one-run server setup script and documentation go in.