SystemForge is a modular, Rust-based DevOps platform for deploying, managing, and monitoring applications across distributed nodes. Whether you're hosting local apps or coordinating workloads across remote machines, SystemForge offers a unified toolbox for secure, performant, and developer-friendly system orchestration.
- Deploy, stop, and restart apps from a single command-line interface
- Pass
.env
variables and config files - View running app status and logs
- Automatic reverse proxy configuration
- Free HTTPS with Let's Encrypt
- Subdomain binding per app (e.g.,
app.node.systemforge.net
)
- Iptables or nftables wrappers
- Block/allow ports per app
- Prevent port conflicts and scan for availability
- Runs on each participating machine
- Launches and monitors containers
- Reports system stats and resource usage
- Enforces resource quotas
- Accepts node registrations with disk space, open ports, and geolocation
- Matches apps with eligible nodes for deployment
- Tracks and schedules multi-node deployment
- Real-time resource usage (CPU, RAM, Disk, Network)
- Exposes Prometheus-compatible metrics
- Health probes for app uptime monitoring
- Injects secure
.env
variables at runtime - App sandboxing through Docker
- Per-app isolation with resource caps
- Define app as TOML/JSON spec
- Deploy to local or remote nodes
- Supports binaries, Docker images, and static files
systemforge/
├── cli/ # CLI tool (clap + async executor)
├── node/ # SystemForge agent (launches apps, reports metrics)
├── coordinator/ # Central Rust API (Actix or Axum)
├── caddy_integration/ # Lib or wrapper for automatic Caddyfile management
├── deploy_schemas/ # JSON/TOML app deployment specs
├── firewall/ # Iptables/nftables rules abstraction
├── telemetry/ # Metrics/logs subsystem (Prometheus-compatible)
├── shared/ # Common crates, utils, error types, models
-
cli/
– Deploy, stop, restart apps -
node/
– App runner + metrics -
coordinator/
– Node tracking + API -
caddy_integration/
– Reverse proxy manager -
deploy_schemas/
– App spec definitions -
firewall/
– Port/network rules -
telemetry/
– System + app monitoring -
shared/
– Common models + helpers