nktA control panel for Linux hosts

One static binary shows what is really going on on a host — configs, services, containers, firewall, certificates — and lets you fix it from the browser. The hub gathers many hosts into one window.

Install

Guide

GitHub

🔎

Finds problems, not just shows things

Parses nginx, haproxy, caddy, docker compose, the firewall and certificates, checks them against the live host and explains every finding — file, line, what to do — with a button to where it gets fixed.

Learn more

🗺️

Resource map

A graph “internet → service → listener → pool → container or machine”: the whole traffic path is highlighted, one service's ports fold together, a node's window links to the right section.

Learn more

📝

Configs with history and validation

An editor with a diff before saving and validation by the service itself — if rejected, the file goes back as it was; versions, rollback, a block editor for nginx/haproxy, sshd lock-out protection.

Learn more

🔐

Certificates end to end

All certificates from configs and /etc/letsencrypt, checks against the TLS socket, auto-renewal, Let's Encrypt issuance, PEM for haproxy, self-signed.

Learn more

🧱

Firewall and fail2ban

ufw and firewalld with port 22 protection and a port's rules highlighted; fail2ban jails, bans, exceptions, templates and a config check before applying.

Learn more

🦠

Vulnerabilities and malware

CVEs in OS packages, inside LXD and libvirt guests and in images via trivy — network-reachable first; miners and signs of a break-in without third-party tools; ClamAV as jobs, with quarantine.

Learn more

🐳

Containers

Docker, Podman and LXD: compose stacks, “Inspect” with variables and their source, image archives with browser upload, engine install with a button, backups.

Learn more

🖥️

Virtual machines

libvirt machines: creation from images and templates, the VNC and SPICE screen right in the browser, snapshots, cloning, backup and restore.

Learn more

☸️

Kubernetes on the host

Cluster objects by section, pod logs and console, Helm releases, port forwarding to the browser, node upgrade as a job.

Learn more

📈

Availability and load

Probes of listeners, container ports, machines and Kubernetes services, a downtime heatmap; load of the host, containers, pods and cluster nodes from hourly summaries.

Learn more

⌨️

Terminal, logs, jobs

A terminal and btop in the browser, live service and file logs, background jobs with a log, progress and cancel.

Learn more

⚙️

System

Packages and updates, disks and a file browser, OS users, time, network, hardware; a reboot with a preview of what will not come back by itself.

Learn more

🖧

The hub — many hosts

Hosts over SSH in one window: groups, installing and updating nkt, narrow sudo with signed operations, a fallback channel, export and import.

Learn more

🔔

Alerts

Host unreachable, new findings, bans, forecasts — with a button straight to the problem on the host; Telegram, Slack, outgoing webhooks.

Learn more

📊

Hub monitoring

Availability and load history of all hosts, containers and Kubernetes nodes, forecasts of disks filling up and memory leaks, hints on what to do.

Learn more

🧩

Profiles and scripts

A host's desired state in YAML with a plan and apply, drift as findings; deployment scripts with a dry run and a diagram.

Learn more

☁️

Kubernetes clusters from the hub

Clusters on machines of one or several hosts, WireGuard, Cilium; manifests and Helm into several clusters at once, node-by-node upgrades.

Learn more

🚀

Deployments from Git

Compose stacks, manifests, Helm and scripts on a button, CI webhook, polling or a new image tag; a dry run, sites with HTTPS, changing the host and stack name, rollback.

Learn more

🤖

Automation and AI

API tokens with roles and host scopes, n8n nodes, bots; model analysis of findings, events and the architecture — with your own instructions.

Learn more

🔒

Secure by default

One dependency-free binary, a systemd sandbox, argon2id, roles, read-only mode, an audit log of every action, privacy mode, listens on localhost only.

Learn more

🌍

Two languages, three themes

The interface and server messages in Russian and English, light, dark and system themes, a terminal UI and a JSON API to everything.

Learn more