admin/ServerKit
1
0 Fork 0
mirror of https://github.com/jhd3197/ServerKit.git synced 2026-11-09 13:35:12 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
2eabfac2b82ee1edcfaecf2d00bbd098ede33db6
ServerKit/ROADMAP.md
T
Juan DenisandClaude Opus 4.8 8aa760bf02 chore: normalize line endings to LF per .gitattributes 
Four files were stored with CRLF in git while .gitattributes mandates
`* text=auto eol=lf`, so git reported them as perpetually "modified":
  - ROADMAP.md
  - backend/app/__init__.py
  - backend/app/models/__init__.py
  - frontend/src/App.jsx

One-time `git add --renormalize` rewriting the stored blobs to LF. Pure
line-ending change — `git diff --ignore-cr-at-eol` is empty, i.e. zero
content was altered. Windows scripts (*.ps1/*.bat/*.cmd) are untouched;
.gitattributes pins them to CRLF and they were correctly skipped.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-05-31 16:29:05 -04:00

622 lines
21 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# ServerKit Roadmap
This document outlines the development roadmap for ServerKit. Features are organized by phases and priority.
---
## Current Version: v1.6.0 (In Development)
### Recently Completed (v1.5.0)
- **New UI & Services Page** - Integrated full Services page with detail views, metrics, logs, and shell.
- **Environment Pipeline** - Multi-environment management for WordPress (Prod/Staging/Dev) with promotion/sync.
- **Visual Infrastructure Designer** - Node-based visual canvas for stack deployment and server overview.
- **Advanced Monitoring UI** - Real-time log streaming and terminal integration in the dashboard.
- **Template Library Expansion** - Over 60+ one-click deployment templates (Immich, Authelia, Ghost, etc.).
- **Team & Permissions** - RBAC with admin/developer/viewer roles, invitations, audit logging
- **SSO & OAuth Login** - Google, GitHub, OIDC, SAML with account linking
---
## Phase 1: Core Infrastructure (Completed)
- [x] Flask backend with SQLAlchemy ORM
- [x] React frontend with Vite
- [x] JWT-based authentication
- [x] Real-time WebSocket updates
- [x] System metrics (CPU, RAM, disk, network)
- [x] Docker and Docker Compose support
- [x] SQLite/PostgreSQL database support
---
## Phase 2: Application Management (Completed)
- [x] PHP/WordPress application deployment
- [x] Python (Flask/Django) application support
- [x] Node.js application management with PM2
- [x] Docker container management
- [x] Environment variable management
- [x] Application start/stop/restart controls
- [x] Log viewing per application
---
## Phase 3: Domain & SSL Management (Completed)
- [x] Nginx virtual host management
- [x] Domain configuration interface
- [x] Let's Encrypt SSL integration
- [x] SSL certificate auto-renewal
- [x] Redirect management (HTTP → HTTPS)
---
## Phase 4: Database Management (Completed)
- [x] MySQL/MariaDB database support
- [x] PostgreSQL database support
- [x] Database creation/deletion
- [x] User management per database
- [x] Basic query interface
---
## Phase 5: File & FTP Management (Completed)
- [x] Web-based file manager
- [x] File upload/download
- [x] File editing with syntax highlighting
- [x] vsftpd FTP server integration
- [x] FTP user management
---
## Phase 6: Monitoring & Alerts (Completed)
- [x] Real-time system metrics
- [x] Server uptime tracking
- [x] Customizable alert thresholds
- [x] Discord webhook notifications
- [x] Slack webhook notifications
- [x] Telegram bot notifications
- [x] Generic webhook support
- [x] Alert history and logging
---
## Phase 7: Security Features (Completed)
- [x] Two-factor authentication (TOTP)
- [x] Backup codes for 2FA recovery
- [x] ClamAV malware scanning
- [x] Quick scan / Full scan options
- [x] File quarantine management
- [x] File integrity monitoring
- [x] Failed login detection
- [x] Security event logging
---
## Phase 8: Scheduled Tasks (Completed)
- [x] Cron job management
- [x] Visual cron expression builder
- [x] Job execution history
- [x] Enable/disable jobs
---
## Phase 9: Firewall Management (Completed - Merged into Security)
- [x] UFW firewall integration
- [x] Visual rule management
- [x] Common port presets
- [x] Rule enable/disable
- [x] Consolidated into Security page for unified security management
---
## Phase 10: Multi-Server Management (Completed)
**Priority: High**
- [x] Agent-based remote server monitoring (Go agent)
- [x] Centralized dashboard for multiple servers
- [x] Server grouping and tagging
- [x] Cross-server metrics comparison
- [x] Remote Docker management via agents
- [x] Server health overview
- [x] Agent WebSocket gateway
- [x] HMAC-SHA256 authentication
- [x] GitHub Actions for agent releases (Linux/Windows)
- [x] Installation scripts endpoint
- [x] Agent auto-update mechanism
- [x] Agent download page in UI
- [x] Container logs streaming for remote servers
---
## Phase 11: Git Deployment (Completed)
**Priority: High**
- [x] GitHub/GitLab webhook integration
- [x] Automatic deployment on push
- [x] Branch selection for deployment
- [x] Rollback to previous deployments
- [x] Deployment history and logs
- [x] Pre/post deployment scripts
- [x] Zero-downtime deployments
---
## Phase 12: Backup & Restore (Completed)
**Priority: High**
- [x] Automated database backups
- [x] File/directory backups
- [x] S3-compatible storage support
- [x] Backblaze B2 integration
- [x] Backup scheduling
- [x] One-click restore
- [x] Backup retention policies
- [x] Offsite backup verification
---
## Phase 13: Email Server Management (Completed)
**Priority: Medium**
- [x] Postfix mail server setup
- [x] Dovecot IMAP/POP3 configuration
- [x] Email account management
- [x] Spam filtering (SpamAssassin)
- [x] DKIM/SPF/DMARC configuration
- [x] Webmail interface integration
- [x] Email forwarding rules
---
## Phase 14: Visual Infrastructure Designer (Completed)
**Priority: High**
The visual canvas for designing and deploying entire infrastructure stacks.
- [x] Node-based Visual Canvas (`WorkflowBuilder.jsx`) using React Flow
- [x] Infrastructure component nodes (Docker, Database, Domain, Service)
- [x] Smart connection rules (link apps to DBs, domains to apps)
- [x] One-click stack deployment from the canvas
- [x] Template-based stack generation
- [x] Server overview mode (visualize existing infrastructure)
---
## Phase 15: Team & Permissions (Completed)
**Priority: Medium**
- [x] Multi-user support
- [x] Role-based access control (RBAC)
- [x] Custom permission sets
- [x] Audit logging per user
- [x] Team invitations
- [x] Activity dashboard
---
## Phase 16: API Enhancements (Completed)
**Priority: Medium**
- [x] API key management
- [x] Rate limiting
- [x] Webhook event subscriptions
- [x] OpenAPI/Swagger documentation
- [x] API usage analytics
---
## Phase 17: Advanced Security (Completed)
**Priority: High**
- [x] Unified Security page with all security features
- [x] Firewall tab with UFW/firewalld management
- [x] Fail2ban integration
- [x] SSH key management
- [x] IP allowlist/blocklist
- [x] Brute force protection
- [x] Security audit reports
- [x] Vulnerability scanning (Lynis)
- [x] Automatic security updates (unattended-upgrades/dnf-automatic)
---
## Phase 18: SSO & OAuth Login (Completed)
**Priority: High**
- [x] Google OAuth 2.0 login
- [x] GitHub OAuth login
- [x] Generic OpenID Connect (OIDC) provider support
- [x] SAML 2.0 support for enterprise environments
- [x] Social login UI (provider buttons on login page)
- [x] Account linking (connect OAuth identity to existing local account)
- [x] Auto-provisioning of new users on first SSO login
- [x] Configurable SSO settings (enable/disable providers, client ID/secret management)
- [x] Enforce SSO-only login (disable password auth for team members)
- [x] SSO session management and token refresh
---
## Phase 19: Database Migrations & Schema Versioning (Completed)
**Priority: High**
- [x] Flask-Migrate (Alembic) integration
- [x] Migration wizard UI (Completed)
- [x] CLI fallback support
---
## Phase 20: New UI & Services Page (Completed)
**Priority: Critical**
Integrated full Services page with detail views, metrics, logs, shell, settings, and package management.
- [x] Services list page with status indicators and quick actions
- [x] Service detail page with tabbed interface (Metrics, Logs, Shell, Settings, Commands, Events, Packages)
- [x] Git connect modal for linking services to repositories
- [x] Gunicorn management tab for Python services
- [x] Service type detection and type-specific UI (Node, Python, PHP, Docker, etc.)
---
## Phase 21: Environment Pipeline (Completed)
**Priority: High**
- [x] WordPress multi-environment pipeline (Prod/Staging/Dev)
- [x] Code and Database promotion between environments
- [x] Production syncing and environment locking
---
## Phase 22: Container Logs & Monitoring UI (Completed)
**Priority: High**
- [x] Real-time log streaming via WebSocket with ANSI color support
- [x] Web-based terminal (`Terminal.jsx`) with shell access
- [x] Per-app resource usage charts (CPU, RAM)
- [x] Log search and filtering
---
# Upcoming Development
The phases below are ordered by priority. Higher phases ship first.
---
## Phase 23: Workflow & Automation Engine — Core (Completed)
**Priority: Critical**
Moving beyond static design to dynamic, event-driven automation. This turns ServerKit into a powerful automation hub.
- [x] **Visual Workflow Builder:** Node-based canvas with drag-and-drop nodes, connection validation, and config panels
- [x] **Cron Integration:** Schedule workflows to run on recurring intervals (e.g., "Every Sunday at 2 AM, backup all DBs and rotate logs")
- [x] **Manual Execution:** Trigger workflows on demand with optional context data
- [x] **Execution History:** Track workflow execution status, per-node results, and timestamped logs
- [x] **Script Nodes:** Custom Shell script execution nodes with output capture
- [x] **Notification Nodes:** Send alerts via configured notification channels
- [x] **One-Click Stack Deployment:** Deploy full infrastructure (databases, apps, domains) from a workflow diagram
---
## Phase 24: Customizable Sidebar & Dashboard Views (Completed)
**Priority: High**
Let users personalize what they see. Not everyone runs email servers or manages Docker — the sidebar should adapt to each user's needs.
- [x] Sidebar configuration page in Settings
- [x] Preset view profiles (Full, Web Hosting, Email Admin, Docker/DevOps, Minimal)
- [x] Custom view builder — toggle individual sidebar items on/off
- [x] Per-user preference storage (saved to user profile)
---
## Phase 25: Workflow Engine — Triggers & Completion (Completed)
**Priority: High**
Complete the workflow engine with proper execution logic, missing triggers, and production-grade reliability.
- [x] **DAG Execution:** Full directed acyclic graph traversal with parallel branch support (replace current linear BFS)
- [x] **Logic Node Evaluation:** If/Else condition evaluation with true/false branching
- [x] **Variable Interpolation:** Pass data between steps using `${node_id.field}` and `{{placeholder}}` syntax in node configs
- [x] **Webhook Triggers:** Register `/hooks/<webhook_id>` endpoint to fire workflows on incoming HTTP requests
- [x] **Event Triggers:** Run workflows on system events (health check failure, high CPU/memory, git push, app stopped)
- [x] **Notification Templating:** Message placeholder substitution (`${node_id.stdout}`, `{{workflow_name}}`) in notification nodes
- [x] **Execution Timeouts:** Configurable timeout per node (1–3600s) to prevent hung workflows
- [x] **Retry on Failure:** Configurable retry count (0–5) and delay per node
- [x] **Circular Dependency Detection:** Kahn's algorithm validates graph on save and before execution
- [x] **Script Sandboxing:** Timeout enforcement, output size limits, explicit `bash -c`/`python3 -c` execution
---
## Phase 26: Agent Fleet Management (Completed)
**Priority: High**
Level up agent management from "connect and monitor" to full fleet control.
- [x] Agent version tracking and compatibility matrix (panel version ↔ agent version)
- [x] Push agent upgrades from the panel (single server or fleet-wide rollout)
- [x] Staged rollout support — upgrade agents in batches with health checks between waves
- [x] Agent health dashboard — connection uptime, heartbeat latency, command success rate per agent
- [x] Auto-discovery of new servers on the local network (mDNS/broadcast scan)
- [x] Agent registration approval workflow (admin must approve before agent joins fleet)
- [x] Bulk agent operations — restart, upgrade, rotate keys across selected servers
- [x] Agent changelog and release notes visible in UI
- [x] Offline agent command queue — persist commands and deliver when agent reconnects
- [x] Command retry with configurable backoff for failed/timed-out operations
- [x] Agent connection diagnostics — test connectivity, latency, firewall check from panel
---
## Phase 27: Cross-Server Monitoring Dashboard (Completed)
**Priority: High**
Fleet-wide visibility — see everything at a glance and catch problems early.
- [x] Fleet overview dashboard — heatmap of all servers by CPU/memory/disk usage
- [x] Server comparison charts — overlay metrics from multiple servers on one graph
- [x] Per-server alert thresholds (CPU > 80% for 5 min → warning, > 95% → critical)
- [x] Anomaly detection — automatic baseline learning, alert on deviations
- [x] Custom metric dashboards — drag-and-drop widgets, save layouts per user
- [x] Metric correlation view — spot relationships between metrics across servers
- [x] Capacity forecasting — trend-based predictions (disk full in X days, memory growth rate)
- [x] Metrics export — Prometheus endpoint (`/metrics`), CSV download, JSON API
- [x] Grafana integration guide and pre-built dashboard templates
- [x] Fleet-wide search — find which server is running a specific container, service, or port
---
## Phase 28: Agent Plugin System (Completed)
**Priority: High**
Make the agent extensible — let users add custom capabilities without modifying agent core. This is the foundation for future integrations (Android device farms, IoT fleets, custom hardware monitoring, etc.).
### Plugin Architecture
- [x] Plugin specification — standard interface (init, healthcheck, metrics, commands)
- [x] Plugin manifest format (YAML/JSON) — name, version, dependencies, capabilities, permissions
- [x] Plugin lifecycle management — install, enable, disable, uninstall, upgrade
- [x] Plugin isolation — each plugin runs in its own process/sandbox with resource limits
- [x] Plugin communication — standardized IPC between plugin and agent core
### Plugin Capabilities
- [x] Custom metrics reporters — plugins can push arbitrary metrics to the panel
- [x] Custom health checks — plugins define checks that feed into the status system
- [x] Custom commands — plugins register new command types the panel can invoke
- [x] Scheduled tasks — plugins can register periodic jobs (cron-like)
- [x] Event hooks — plugins can react to agent events (connect, disconnect, command, alert)
---
## Phase 29: Server Templates & Config Sync (Completed)
**Priority: Medium**
Define what a server should look like, apply it, and detect when it drifts.
- [x] Server template builder — define expected state (packages, services, firewall rules, users, files)
- [x] Template library — save and reuse templates (e.g., "Web Server", "Database Server", "Mail Server")
- [x] Apply template to server — install packages, configure services, set firewall rules via agent
- [x] Config drift detection — periodic comparison of actual vs. expected state
- [x] Drift report UI — visual diff showing what changed and when
- [x] Auto-remediation option — automatically fix drift back to template (with approval toggle)
- [x] Template versioning — track changes to templates over time
- [x] Template inheritance — base template + role-specific overrides
- [x] Bulk apply — roll out template changes across server groups
- [x] Compliance dashboard — percentage of fleet in compliance per template
---
## Phase 30: Multi-Tenancy & Workspaces (Completed)
**Priority: Medium**
Isolate servers by team, client, or project. Essential for agencies, MSPs, and larger teams.
- [x] Workspace model — isolated container for servers, users, and settings
- [x] Workspace CRUD — create, rename, archive workspaces
- [x] Server assignment — each server belongs to exactly one workspace
- [x] User workspace membership — users can belong to multiple workspaces with different roles
- [x] Workspace switching — quick-switch dropdown in the header
- [x] Per-workspace settings — notification preferences, default templates, branding
- [x] Workspace-scoped API keys — API keys restricted to a single workspace
- [x] Cross-workspace admin view — super-admin can see all workspaces and usage
- [x] Workspace usage quotas — limit servers, users, or API calls per workspace
- [x] Workspace billing integration — track resource usage per workspace for invoicing
---
## Phase 31: Advanced SSL Features (Completed)
**Priority: Medium**
- [x] Certificate expiry monitoring
- [x] Wildcard SSL certificates via DNS-01 challenge
- [x] Multi-domain certificates (SAN)
- [x] Custom certificate upload (key + cert + chain)
- [x] Certificate expiry notifications (email/webhook alerts before expiration)
- [x] SSL configuration templates (modern, intermediate, legacy compatibility)
- [x] SSL health check dashboard (grade, cipher suites, protocol versions)
---
## Phase 32: DNS Zone Management (Completed)
**Priority: Medium**
Full DNS record management with provider API integration.
- [x] DNS zone editor UI (A, AAAA, CNAME, MX, TXT, SRV, CAA records)
- [x] Cloudflare API integration (list/create/update/delete records)
- [x] Route53 API integration
- [x] DigitalOcean DNS integration
- [x] DNS propagation checker (query multiple nameservers)
- [x] Auto-generate recommended records for hosted services (SPF, DKIM, DMARC, MX)
- [x] DNS template presets (e.g., "standard web hosting", "email hosting")
- [x] Bulk record import/export (BIND zone file format)
---
## Phase 33: Nginx Advanced Configuration (Completed)
**Priority: Medium**
Go beyond basic virtual hosts — full reverse proxy and performance configuration.
- [x] Visual reverse proxy rule builder (upstream servers, load balancing methods)
- [x] Load balancing configuration (round-robin, least connections, IP hash)
- [x] Caching rules editor (proxy cache zones, TTLs, cache bypass rules)
- [x] Rate limiting at proxy level (per-IP, per-route)
- [x] Custom location block editor with syntax validation
- [x] Header manipulation (add/remove/modify request/response headers)
- [x] Nginx config syntax check before applying changes
- [x] Config diff preview before saving
- [x] Access/error log viewer per virtual host
---
## Phase 34: Status Page & Health Checks (Completed)
**Priority: Medium**
Public-facing status page and automated health monitoring.
- [x] Automated health checks (HTTP, TCP, DNS, SMTP) with configurable intervals
- [x] Public status page (standalone URL, no auth required)
- [x] Status page customization (logo, colors, custom domain)
- [x] Service grouping on status page (e.g., "Web Services", "Email", "APIs")
- [x] Incident management — create, update, resolve incidents with timeline
- [x] Uptime percentage display (24h, 7d, 30d, 90d)
- [x] Scheduled maintenance windows with advance notifications
- [x] Status page subscribers (email/webhook notifications on incidents)
- [x] Historical uptime graphs
- [x] Status badge embeds (SVG/PNG for README files)
---
## Phase 35: Server Provisioning APIs (Completed)
**Priority: Medium**
Spin up and manage cloud servers directly from the panel.
- [x] DigitalOcean API integration (create/destroy/resize droplets)
- [x] Hetzner Cloud API integration
- [x] Vultr API integration
- [x] Linode/Akamai API integration
- [x] Server creation wizard (region, size, OS, SSH keys)
- [x] Auto-install ServerKit agent on provisioned servers
- [x] Server cost tracking and billing overview
- [x] Snapshot management (create/restore/delete)
- [x] One-click server cloning
- [x] Destroy server with confirmation safeguards
---
## Phase 36: Performance Optimization (Completed)
**Priority: Low**
- [x] Redis caching for frequently accessed data (metrics, server status)
- [x] Database query optimization and slow query logging
- [x] Background job queue (Celery or RQ) for long-running tasks
- [x] Lazy loading for large datasets (paginated API responses)
- [x] WebSocket connection pooling and reconnection improvements
- [x] Frontend bundle optimization and code splitting
---
## Phase 37: Mobile App (Completed)
**Priority: Low — v3.0+**
- [x] React Native or PWA mobile application
- [x] Push notifications for alerts and incidents
- [x] Quick actions (restart services, view stats, acknowledge alerts)
- [x] Biometric authentication (fingerprint/Face ID)
- [x] Offline mode with cached server status
---
## Phase 38: Marketplace & Extensions (Completed)
**Priority: Low — v3.0+**
- [x] Plugin/extension system with API hooks
- [x] Community marketplace for plugins
- [x] Custom dashboard widgets
- [x] Theme customization (colors, layout, branding)
- [x] Extension SDK and developer documentation
---
## Version Milestones
| Version | Target Features | Status |
|---------|-----------------|--------|
| v0.9.0 | Core features, 2FA, Notifications, Security | Completed |
| v1.0.0 | Production-ready stable release, DB migrations | Completed |
| v1.1.0 | Multi-server, Git deployment | Completed |
| v1.2.0 | Backups, Advanced SSL, Advanced Security | Completed |
| v1.3.0 | Email server, API enhancements | Completed |
| v1.4.0 | Team & permissions, SSO & OAuth login | Completed |
| v1.5.0 | New UI, Visual Designer, Services Page | Completed |
| v1.6.0 | Workflow triggers & completion, fleet management | Current |
| v1.7.0 | Cross-server monitoring, agent plugin system | Completed |
| v1.8.0 | Server templates, multi-tenancy | Completed |
| v1.9.0 | Advanced SSL, DNS management, Nginx config | Completed |
| v2.0.0 | Status pages, server provisioning, performance | Completed |
| v3.0.0 | Mobile app, Marketplace | Completed |
---
## Contributing
Want to help? See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
**Priority areas for contributions:**
- Agent plugin SDK and example plugins
- Fleet management and monitoring dashboard
- DNS provider integrations (Cloudflare, Route53)
- Status page and health check system
- UI/UX improvements
- Documentation
---
## Feature Requests
Have a feature idea? Open an issue on GitHub with the `enhancement` label.
---
<p align="center">
<strong>ServerKit Roadmap</strong><br>
Last updated: March 2026
</p>
Reference in new issue View Git Blame Copy Permalink