Open sourceSelf-hosted · v0.1.0

Manage every database from one control plane.

Provision, monitor, back up, restore, and migrate self-hosted database instances across your servers from one secure interface.

Open source. Self-hosted. Built for database fleets.

The problem

Database operations should not depend on SSH and shell scripts.

When databases are spread across many servers, the operations that keep them healthy stay manual, inconsistent, and invisible. Fleetdock standardizes them.

Manual SSH administration

Every provision, backup, and fix is a shell session on a specific host. Knowledge lives in someone's terminal history.

Scattered backup cron jobs

Backups run from ad-hoc crontabs with no shared status. You find out a job stopped when a restore fails.

Undocumented restore steps

Restores depend on tribal knowledge and one-off scripts, so they are slow and risky exactly when they matter most.

Unsafe credential handling

Database passwords end up in env files, chat messages, and wikis with no rotation or central control.

No central inventory

No single answer to which database runs on which node, at what version, with how much headroom left.

Risky server migrations

Moving a database means hand-assembling dump, transfer, and import steps — and hoping nothing drifts.

Limited capacity visibility

CPU, memory, and disk are checked per host, so you notice a node is full only after it starts failing.

Expensive managed databases

Managed cloud databases solve the operations problem but get costly at scale and take away infrastructure ownership.

Architecture

One manager. Multiple database nodes.

Fleetdock separates the control plane from the servers that run your databases, so you operate the whole fleet from one place without opening shells.

  • Fleetdock Manager

    The central control plane. It serves the dashboard and API, tracks every operation, and stores fleet metadata in PostgreSQL.

  • Fleetdock Agent

    A lightweight service on each database node. It enrolls with a single-use token, heartbeats health, and executes approved operations locally.

  • Database nodes

    Your own servers. Provisioned MariaDB, MySQL, and PostgreSQL instances run in isolated Docker containers; the Manager never touches a node except through its agent.

  • Fleetdock Gateway

    An optional HAProxy service colocated with the Manager. It exposes stable, CIDR-gated TCP endpoints for external applications — one port per database, with config owned by the control plane.

Explore the architecture

Fleetdock Manager

Control plane · UI · API · worker

Fleetdock Agentdb-node-eu-01
  • MariaDB
  • PostgreSQL
Fleetdock Agentdb-node-eu-02
  • MySQL
  • MariaDB
Fleetdock Agentdb-node-eu-03
  • PostgreSQL

Agents enroll over a single outbound HTTPS connection and execute only approved operations on their own node.

Use cases

Built for teams running database fleets.

Fleetdock is designed for the specific problem of operating many isolated database instances across many servers.

All use cases

Database-per-tenant SaaS

Manage isolated databases for every customer from one control plane.

ERP and CRM platforms

Operate many customer database instances across multiple servers.

Hosting providers

Provision and maintain database instances for clients.

Agencies

Manage customer databases without sharing manual server access.

Self-hosted software vendors

Offer managed database operations on customer-controlled infrastructure.

Internal infrastructure teams

Replace scripts, spreadsheets, and undocumented procedures.

Comparison

Ownership and central management, without the trade-off.

Fleetdock sits between running everything by hand and giving your databases to a managed cloud provider — you keep the infrastructure and gain the operations layer.

Comparison of manual database operations, managed cloud databases, and Fleetdock
CapabilityManual operationsManaged cloud databaseFleetdock
Infrastructure ownershipYesNoYes
Central managementLimitedYesYes
Multi-server visibilityManualProvider-specificYes
Automated backupsCustom scriptsIncludedCentralized
Database migrationManualProvider-specificControlled workflow
Vendor lock-inLowHighLow
Operational effortHighLowReduced

Comparison reflects implemented Fleetdock capabilities. Fleetdock does not provide automatic failover or high availability.

Security

Database infrastructure requires more than a login screen.

Fleetdock holds credentials for your entire fleet, so its security model is explicit — including the boundaries it does not yet cover.

Single-use enrollment

Agents register with short-lived, single-use tokens and then authenticate with their own bearer token.

Secrets encrypted at rest

Instance passwords and storage keys are envelope-encrypted with a key you control, and re-wrapped on rotation.

Presigned backup access

Backups stream to object storage through time-limited presigned URLs — agents never receive your storage credentials.

Role-based access control

Owner, admin, operator, and viewer roles plus custom roles from a permission catalog, with scoped API tokens.

CIDR-gated public access

External database access routes through the Fleetdock Gateway with CIDR allowlists — disabled by default, with application credentials instead of root passwords.

Tracked operations & audit

Every mutating action is a tracked operation with status and history, alongside an audit log of changes.

Rotation & revocation

Rotate the encryption and JWT secrets, revoke API tokens, and suspend accounts to cut off sessions immediately.

Known limitations in the current release

The dashboard stores its session token in localStorage, so deploy it behind TLS on a trusted network. SSO/OIDC and 2FA are on the roadmap, not yet available. The agent currently runs as root. Gateway TLS is passthrough only in the current MVP. See the security documentation for the full trust model and mitigations.

Open source

Open source. Self-hosted. No database infrastructure lock-in.

Fleetdock is Apache-2.0 licensed and runs entirely on infrastructure you control. Read the code, file issues, and follow the roadmap in the open.

A Go control plane and agent with a Next.js dashboard, released in the open.

Stop managing databases one server at a time.

Connect your infrastructure, standardize database operations, and manage every instance from one control plane.