Dockhand

Dockhand is a multi-host Docker manager and container management interface used to control the lifecycle of containers, images, volumes, and networks. It functions as a Docker Compose orchestrator and GitOps deployment tool, enabling the synchronization of application stacks directly from remote Git repositories.

The project distinguishes itself as an enterprise Docker access controller, providing role-based access control and identity verification through OIDC, LDAP, and multi-factor authentication. It secures sensitive data using AES-256-GCM encryption for credentials at rest and handles native TLS termination for its interface and API.

The platform covers a broad range of operational capabilities, including real-time resource monitoring, log streaming, and image vulnerability scanning. It provides tools for remote Docker orchestration via sockets or TCP, as well as interactive web-based terminals and visual filesystem browsers for managing container data.

Automation is handled through scheduled image updates, maintenance tasks, and webhook-driven deployment triggers.

Features

Docker Socket Orchestrators - Manages container lifecycles across multiple remote hosts by connecting via Docker sockets or TCP.

Docker Container Orchestrators - Provides a comprehensive visual interface for managing the full lifecycle, deployment, and monitoring of Docker containers across multiple hosts.

GitOps Deployment Management - Automates container updates and stack deployments by synchronizing with remote Git repositories and webhooks.

Compose Orchestrators - Orchestrates multi-container applications using Docker Compose YAML configurations.

Container Lifecycle Management - Provides a full interface to start, stop, restart, and remove containers with advanced configuration.

Container Monitoring - Tracks real-time CPU and memory usage and streams logs from containers across multiple environments.

Git-Based Deployment - Provides automated deployment of application stacks by synchronizing configuration directly from version control repositories.

Git-Based Deployment Automations - Automates container deployments by polling Git repositories for changes and triggering updates.

GitOps Workflows - Automates the deployment of Docker Compose stacks by synchronizing application configurations directly from Git repositories.

Administrative Access Control - Acts as an administration layer providing RBAC, OIDC, LDAP authentication, and encrypted secret injection.

Credential Encryption - Protects registry passwords and SSH keys using AES-256-GCM authenticated encryption at rest.

Encrypted Secret Management - Securely stores sensitive environment variables in an encrypted database and injects them into containers at runtime.

LDAP Authentication - Integrates with centralized LDAP or Active Directory servers for enterprise user authentication.

Multi-Factor Authentication - Protects local user accounts by requiring a second authentication factor via TOTP tokens.

Role-Based Access Control - Implements role-based access control integrated with OIDC and LDAP for managing infrastructure tool permissions.

Single Sign-On Integrations - Enables single sign-on for application access using OpenID Connect identity providers.

Container Host Connections - Enables management of environments across different machines using local sockets, direct TCP, or specialized agents.

Web-Based Terminals - Provides interactive, browser-based shell access to running containers via websockets.

Automated Container Image Updaters - Checks for new image versions on a schedule and automatically redeploys containers to keep software current.

Container Configuration Templates - Uses reusable configuration templates to maintain consistency across different container deployments.

Registry Discovery - Provides a visual browser to discover and search for available images within configured registries.

Docker Engine Automations - Offers a REST API for the programmatic management of containers, networks, and stacks.

Template-Based Deployment - Ensures consistent deployments by mapping predefined catalog variables into Docker Compose specifications.

Webhook Deployment Listeners - Automates stack synchronization and redeployment using HTTP POST webhook events from external services.

Container Image Vulnerability Scanners - Integrates with vulnerability scanners to analyze container images for known CVEs before deployment.

Audit Logging Systems - Maintains a comprehensive audit trail of all actions performed across connected Docker environments for security compliance.

Container Log Streamers - Displays real-time container output with ANSI color support for debugging and observability.

Compute Usage Metrics - Provides real-time tracking of CPU, memory, and disk consumption for running containers.

Real-Time Server Activity Monitors - Tracks all container events across environments in real-time via a centralized activity log.

Container Shell Sessions - Provides a web-based terminal that pipes shell sessions through WebSockets for interactive container command execution.

Finsysdockhand

Features

Star history