Operate Linux fleets with
scoped privilege and live runtime control
Self-hosted quick start
Install the control plane with one command, complete guided setup at /setup, then let the dashboard surface future control-plane updates when a newer official build is available.
curl -fsSLo noderax-platform-install.sh https://cdn.noderax.net/noderax-platform/install.sh
# verify published SHA-256 before sudo
sudo bash noderax-platform-install.shDashboard
Live · Stream healthyMonitor node health, workload, and recent activity.
Node snapshot
2
Nodes currently loaded into this dashboard snapshot window.
Online snapshot
2
Loaded snapshot nodes actively reporting recent state.
Task snapshot
0
Running tasks currently present in the dashboard task window.
Failed snapshot
29
Failed tasks currently visible in the dashboard snapshot.
Node telemetry board
Nodes are shown in groups of four so each telemetry snapshot stays separate and easy to scan.
Noderax Server
ip-172-26-2-73
Resource snapshot
Latest sample
Runtime
Last seen
16 minutes ago
Rack profile
Telemetry ready
RaspberryPi
pi-home
Resource snapshot
Latest sample
Runtime
Last seen
16 minutes ago
Rack profile
Telemetry ready
Recent events
Alerts, state changes, and task transitions ordered by recency.
High Cpu
Metrics pipelineCPU usage on ip-172-26-2-73 reached 97.5%
High Cpu
Metrics pipelineCPU usage on pi-home reached 95.0%
High Cpu
Metrics pipelineCPU usage on ip-172-26-2-73 reached 94.9%
Node Root Access Updated
Node monitorNode ip-172-26-2-73 root access profile was disabled.
High Cpu
Metrics pipelineCPU usage on pi-home reached 91.4%
Node snapshot
Recent node activity
A concise view of the nodes contributing the most recent telemetry.
| Name | Status | CPU | Memory | Last seen | Actions |
|---|---|---|---|---|---|
Noderax Server ip-172-26-2-73 | online | 3% | 67% | 16 minutes ago | |
RaspberryPi pi-home | online | 2% | 29% | 16 minutes ago |
Product surface
Mobile keeps the message, not the dashboard chrome.
The full live dashboard preview is reserved for larger screens. On mobile, focus stays on guided install, scoped privilege, terminals, notifications, and update orchestration.
Guided self-hosted setup
Install with one command, finish /setup, then operate the HA runtime.
Staged updates
Agent rollouts and control-plane releases stay staged, explicit, and observable.
Scoped Root Profiles
Per-node operational, task, and terminal scopes with desired/applied sync visibility.
Node Delivery Rules
Workspace Email and Telegram automations with node-level severity overrides.
Update Center
Tagged agent releases and installer-managed control-plane updates land in one staged apply flow.
Grounded in the runtime boundaries the product actually ships.
Noderax is not a generic dashboard skin. The web surface, API, agents, persistence layer, and policy gates are separated so onboarding, execution, notifications, and rollouts stay coherent as the product grows.
Next.js 16 Operator Surface
Workspace-aware App Router UI with auth handlers, proxy routes, and dedicated terminal attachment flows.
NestJS Orchestration API
Installer-managed setup, control-plane self-update orchestration, scheduling, audit logging, notifications, and rollout orchestration live here.
Go Fleet Agents
Linux daemons handle bootstrap, telemetry, long-poll task claiming, realtime terminals, and self-update.
PostgreSQL + Redis
Durable control-plane history and reconnect-aware pub/sub fan-out back the operational state model.
Realtime + Terminal Channels
Dedicated /realtime and /terminal namespaces keep installs, metrics, update state, tasks, and shell sessions current.
Policy Gates
Invite-first access, MFA, OIDC, workspace RBAC, and per-node root profile gating enforce operator boundaries.
Built for Day-0 through Day-2 operations
What operators can do today: onboard nodes, scope privilege, tune alert delivery, inspect audits, ship official agent releases, and stage control-plane updates from one web surface.
Identity & Access
Invite-first users, password login, TOTP MFA, and OIDC-based SSO live in the same control plane.
- Platform admin plus workspace owner/admin/member/viewer roles
- Public auth lifecycle for invites, password reset, and MFA challenge
- Unified account and platform identity settings
Workspace & Team Model
Workspaces, members, teams, default-workspace fallback, archived read-only mode, and unified search are already wired in.
- Team-targeted task and schedule expansion
- Search across nodes, tasks, schedules, events, members, and teams
- Archived workspaces stay readable while mutations pause
Node Onboarding & Inventory
Two-step add-node onboarding gives you short-lived bootstrap commands, live install progress, and Linux inventory with telemetry once the control plane is up.
- Short-lived agent bootstrap command generation from the dashboard
- Node version, platform, and kernel visibility
- Maintenance mode and online or offline state tracking
Execution & Terminals
Shell tasks, schedules, package actions, and browser terminals share a guarded execution model instead of separate tools.
- 5-minute terminal reattach window after leaving the page
- 7-day transcript retention with timeline replay
- Root-aware package, task, schedule, and terminal controls
Notifications & Audit
Workspace Email and Telegram automations, node-level delivery overrides, and audit views keep operators informed without extra plumbing.
- Severity-based Email and Telegram filters
- Per-node rules for node-scoped event delivery
- Platform and workspace audit history for admin changes
Update Center
Official tagged agent releases and installer-managed control-plane builds flow into one updates center with staged download, apply, and recovery controls.
- Release notes resolved from the agent changelog
- Platform admins get new control-plane build alerts and can stage or apply them from the dashboard
- Retry, skip, resume, cancel, rollback, and version-aware node eligibility controls
One product, four coordinated runtime responsibilities
Noderax splits work across web, API, agent, and realtime layers so setup, execution, alerting, and updates share one consistent runtime story.
Next.js 16 Operator Surface
App Router UI, auth handlers, workspace routing, and dedicated realtime and terminal clients shape the operator experience.
Browser Boundary
The browser never needs raw API credentials for every surface. Route handlers and cookies keep the public edge thinner and easier to reason about.
Key Technical Properties
Modeling operations your teams execute natively
The current product already covers platform setup, node onboarding, guarded execution, and staged update management without inventing side consoles.
Installer-Managed Setup
Install with one command, validate PostgreSQL, Redis, and optional SMTP, then persist runtime settings with restart-aware platform controls.
Add-Node Onboarding
Generate a short-lived bootstrap command, run it on the host, and watch install progress stream back into the workspace.
Guarded Execution Surfaces
Operational actions, shell tasks, scheduled tasks, and browser terminals unlock only after the applied root profile grants that surface.
Update Center
Tagged agent releases and newer control-plane builds appear in Updates with staged download, guarded apply, and rollback-aware execution.
Governance deeply wired into the control plane
Security and operator boundaries are enforced in product surfaces, not promised in policy docs. Authentication, privilege gates, notification routing, and audit views are already part of the shipped runtime.
Identity & Session Security
Invite-first accounts, password reset, TOTP MFA, and OIDC provider management are built into the default control plane.
Workspace RBAC & Teams
Platform admins span the installation while workspace owner/admin/member/viewer roles scope who can mutate nodes, tasks, and settings.
Alert Routing With Overrides
Workspace Email and Telegram automations filter INFO/WARNING/CRITICAL events, while node-specific rules suppress noisy node-scoped delivery.
Root Profiles & Audit History
Per-node root access profiles track desired/applied sync state, and task, terminal, node, rollout, and settings changes appear in audit views.
Choose how you want to run Noderax
Self-hosted is available today. Cloud and Enterprise are shown explicitly as planned options instead of pretending they already exist.
Self Hosted
Run Noderax on your own infrastructure and adopt the control plane at your own pace.
Cloud
Managed Noderax control plane for teams that want the product without owning the platform runtime.
Enterprise
Expanded commercial offering for larger organizations with stricter rollout, governance, and support expectations.
Control plane queries answered without hand-waving
Stand up the control plane, then grow into daily operations.
The current platform already covers onboarding, telemetry, terminals, alerting, agent release management, and staged control-plane updates without requiring extra sidecars or bolt-on operator tools.