Gungnr is a dockerized control panel for deploying template-based projects and exposing local services via Cloudflare Tunnel. It runs on Linux hosts with access to Docker, the templates directory, and the local cloudflared config, and serves a web UI behind an nginx proxy.

Why I did it:

The deploy.sh silly little shell script tells a lot about the history of this project: Basically, it was a collection of automations to manage templates for projects so I could start coding with the whole HTTPS and deploy stuff right away. From my computer. But since I also intended to expand the features after using it for a while, I decided to create a more sophisticated full stack application, that would allow me to expand the capabilities even further.

This project is perfect for simple development and test environment, personal use, and even share a machine with friends or colleagues to run simple useful service. I'm planning to expand the list of docker service presets avaliable in the future, as well as the tech stack templates.

• Go API + Postgres + job runner.
• Vue 3 UI served by nginx.
• Single nginx proxy on port 80 routes /, /api, and /auth.
• cloudflared runs on the host as a user-managed CLI process (primary path).
• API is the orchestration/control plane: it submits bridge intents and maps worker results to jobs/logs.
• Host lifecycle execution is handled by the host worker through the filesystem bridge queue.
• deploy.sh is reference-only; do not modify it. The UI must reproduce its CLI behavior before any advanced automation.

• Cloudflared, Docker and Docker Compose on host machine.
• GitHub account.
• Cloudflare account (free tier) and a domain registered on Cloudflare.

Currently, Gungnr is only supported on Linux. We are looking forward to introducing a compatibility layer for other operating systems soon.

• Linux (amd64/arm64) with apt, dnf, yum, pacman, apk, or zypper package managers.
• Installer requires Bash (install.sh is a bash script). Run it from Bash even if your login shell is zsh.
• macOS and Windows support is planned for future releases.

The bootstrap CLI configures and runs a locally managed tunnel with cloudflared as a user-managed process. Manual tunnel setup is no longer required for a standard install. Reboot fallback is available via keepalive tooling and bootstrap-installed watchdog scripts.

0) Do all Cloudflare and Github prerequisite config as instructed on docs!!

1) Run:

 wget -qO /tmp/gungnr-install.sh https://raw.githubusercontent.com/Hrafngud/gungnr/main/install.sh && chmod +x /tmp/gungnr-install.sh && /tmp/gungnr-install.sh

to install the prerequisites and build the native CLI locally from source.

The installer no longer depends on GitHub release assets. If you host your own native binary, set GUNGNR_CLI_URL before running the installer.

2) Run gungnr bootstrap and follow the prompts to configure the application.

3) Open the printed panel URL and login via GitHub.

4) Configure GitHub App settings in the UI if you want to enable template creation (optional).

0) Do all Cloudflare and Github prerequisite config as instructed on docs!!

1) Create a directory:

mkdir gungnr-dev
cd gungnr-dev

then clone Gungnr:

git clone https://github.com/Hrafngud/gungnr.git

OBS: If you clone it at ~/ , it will conflict with gungnr default config directory, do it into a separate directory.

2) Build:

go build -o ./gungnr ./cmd/gungnr

3) Run bootstrap:

./gungnr bootstrap

4) Open the printed panel URL and login via GitHub.

5) Configure GitHub App settings in the UI if you want to enable template creation (optional).

Live: https://docs.jdoss.pro

Local source: docs/index.html (landing), docs/docs.html (docs), docs/errors.html (errors). (If you forked the repo, you can continue to document new features there.)

• SemVer tags build native CLI artifacts for linux and darwin (amd64 and arm64) as GitHub Actions workflow artifacts.
• The release workflow does not create or upload GitHub release assets.
• The release workflow does not publish container images.
• install.sh builds the CLI locally from source by default, so bootstrap installs do not depend on release-asset publication.

• One-command installer & bootstrap: install.sh verifies dependencies; gungnr bootstrap configures tunnel, DNS, and environment in one flow.
• GitHub OAuth authentication: Secure login with role-based access control (SuperUser, Admin, User).
• Deploy flows:
  • Create from template: Start fresh projects from curated fullstack templates (currently Vue + Go + PostgreSQL).
  • Deploy existing: Forward local applications (localhost:PORT) to subdomains.
  • Quick services: Pull Docker registry images and expose via tunnel for rapid testing.
• Cloudflare integration: Locally managed tunnels with ingress routing and DNS management via Cloudflare API.
• Docker-based runtime: Compose orchestration with container logs, job history, and audit trails in the UI.
• Daemon management for keepalive: gungnr keepalive installs/removes system-level systemd reboot recovery (gungnr.service + gungnr-keepalive.timer) for panel + project stack regeneration.
• Role-based access control (RBAC): SuperUsers manage everything; Admins have most privileges but can't assign roles; Users can deploy and run jobs but can't manage allowlist.
• CLI operations: gungnr restart, gungnr tunnel run, gungnr keepalive, and gungnr uninstall commands for panel and tunnel control.

• Expanded RBAC: Define clearer RBAC rules and presets for different case scenarios.
• Additional templates: Support for different fullstack stacks beyond the current Vue + Go + PostgreSQL.
• Enhanced bootstrap: Idempotent re-runs and safe upgrade paths.
• Additional CLI commands: More panel and tunnel control operations.
• Interoperability: Modern support for integration with external tools (API's, MCP's etc.).
• macOS support: Compatibility layer for macOS (amd64/arm64) via native installer.
• Windows support: PowerShell-based installation and management flows.
• Feedback and support official channels: Currently, if you have an problem you can open an issue directly.
• Console and Filesystem: Adding console and filesystem views.
• TUI installer persistence: Persisting the installation state for a while even when user shutdown the TUI.
• Advanced Docker deployment: For a broad compatibility with images that require custom setup before startup.
• More one click deployments: Testing and validating more tools for quick deployment.

Since only OAuth is supported, when you wish to hit the panel with curl, or give a token to an agent/test suite, you can leverage this endpoint for grabbing a token, this is optional and requires setting up the variables in .env:

If ADMIN_LOGIN and ADMIN_PASSWORD are set, you can request a bearer token:

curl -sS http://localhost/test-token \
  -H 'Content-Type: application/json' \
  -d '{"login":"admin","password":"secret"}'

Use the returned token as Authorization: Bearer <token> for /api/v1/* routes.

• Create from template: choose a name and subdomain; Gungnr creates the repo and deploys it.
• Forward localhost service: provide a service name, subdomain, and local host port to expose an existing app through the tunnel.
• Quick local service: provide a subdomain and host port (defaults to running an Excalidraw container on port 80).
• Activity: review the audit timeline of user actions in the Activity view.