Cross-VPS project & container live migration
Move containers and full stacks between connected VPS hosts with zero configuration loss.
- Guided migration wizard supporting cross-server transfers across any connected cloud or bare-metal VPS.
- Preflight SSH validation and connectivity checks before initiating data transfer.
- Automated configuration preservation: environment variables, port mappings, custom networks, and volume paths.
- Real-time migration event stream and status reporting integrated into container metrics.
TugShield automated VPS security & firewall orchestration
Hardened server protection, automated security audits, fail2ban host management, and firewall controls right from the dashboard.
- Automated server security auditing integrated directly into background agent heartbeats.
- 1-click UFW firewall rules management without requiring manual SSH or terminal editing.
- Automated host
fail2ban service detection, installation, health verification, and active jail status.
- Automated detection of exposed ports, default configurations, and security recommendations.
- Security score tracking and actionable remediation hints in the control center.
Universal command palette (Cmd+K) & interactive resource monitoring
Instant keyboard navigation across all servers and high-performance container CPU, memory, and I/O time-series charts.
- Global
Cmd+K / Ctrl+K palette to instantly jump to any server, container, deployment, or setting.
- Nixpacks build engine support for building container images directly from git source without Dockerfiles.
- Interactive container resource metrics visualization powered by Recharts & Tremor: CPU usage, memory consumption, network throughput, and disk I/O.
- Drag-to-zoom, series toggle, circular hover indicators, and smart time-series downsampling.
- Background worker task system with global async execution history and status tracking.
TugRouter reverse proxy & custom domain management
Zero-touch edge routing, custom domain mapping, automated SSL certificates, and port mapping.
- Dedicated TugRouter management panel per VPS node for reverse proxy orchestration.
- 1-click domain routing, SSL certificate provisioning, and port mapping without manual Caddy or Traefik config files.
- Per-application routing rules with instant reload and zero-downtime reconfiguration.
- Clear status tracking, health probes, and graceful uninstalled state handling.
Dokploy & Coolify workload adoption & migration wizard
Seamlessly discover, inspect, and import existing Docker Compose workloads from Dokploy or Coolify into tug.sh.
- Automatic discovery of existing Dokploy and Coolify project stacks directly on connected VPS nodes.
- Visual migration wizard with compose file diff review, volume mapping inspection, and environment variable audits.
- Safe workload adoption without stopping running production containers during import.
- Compatibility guard against schema mismatches and orphaned containers.
500+ One-click open source app templates & marketplace
Deploy pre-configured, production-ready open source services with official logos and categorized search.
- Comprehensive marketplace catalog with over 500 pre-configured application templates with official SVG logos and categorized navigation.
- Curated popular services: PostgreSQL, Redis, MinIO, n8n, Ghost, Umami, Plausible, PocketBase, Meilisearch, and more.
- Automatic volume mounts, secure random secret generation, and internal Docker networking configuration.
- Provider-aware Docker registry search and import from Docker Hub, GHCR, and Quay.
Agent runtime observability & real-time build streaming
Live WebSocket-driven streaming of Nixpacks and Dockerfile builds, command lifecycles, and persistent deployment history.
- Real-time build log streaming over WebSockets: watch container compilation lines directly in the browser terminal console.
- Persistent deployment history keeping track of past build durations, initiator identities, commit tags, and full logs.
- Automatic VPS pairing detection: instantaneous transition from the connection modal to the node dashboard as soon as the agent connects.
- Outbound-only agent architecture requiring zero exposed incoming ports on client VPS nodes.
Autonomous host release manager & Admin Release Console
Zero-downtime atomic container releases, isolated build sandboxes, and web-based release management for host infrastructure.
- Autonomous
tug-release.sh release manager running directly on the host VPS.
- Pre-flight isolated builds in
/tmp/tug-build-* ensuring new images compile 100% successfully before touching production containers.
- Zero-downtime atomic container swap sequence with automatic adoption and cleanup of legacy Dokploy/Coolify containers.
- Visual Admin Release Console in
admin.tug.sh with commit diff inspection, component checkboxes (router, baza, app, landing, api, admin), presets, and live terminal streaming.
- Built-in database isolation ensuring production PostgreSQL connection pools are preserved during standard releases.