Deploy Anything, Own Everything (Overview)

RushDeploy is a high-performance, self-hosted Platform-as-a-Service (PaaS) control plane that converts commodity Virtual Private Servers (VPS) and bare-metal nodes into a modern, fully managed cloud platform — combining the developer experience of Vercel and Heroku with the absolute sovereignty of on-premise infrastructure.

Connect your GitHub repositories, and RushDeploy automatically parses repository trees, resolves dependencies, compiles sandboxed multi-stage Docker containers, provisions isolated PostgreSQL/MariaDB/Redis instances, and wires up dynamic reverse-proxy routes on custom domains or wildcards — completely eliminating manual deployment scripts, complex compose files, and third-party vendor lock-in.

The Deployment Pipeline (How It Works)

From a git push on GitHub to a zero-downtime live deployment:

Rendering diagram...

1. Webhook Ingestion & Validation: GitHub push webhooks are signed, validated, and ingested asynchronously via FastAPI.
2. Distributed Celery Queue: Build and deployment tasks are dispatched to Celery background workers backed by Redis, keeping the REST control plane fully non-blocking.
3. AST & Manifest Detection: The detector engine parses package.json, requirements.txt, vite.config.*, directory structures, and Dockerfiles to auto-select the build presets for single apps or split monorepos (e.g., Vite frontend + FastAPI backend).
4. Hardened Docker Builds: Builds run in isolated layers, configuring non-root runtimes, memory/CPU quotas, automatic healthchecks, and dropped Linux capabilities for defense-in-depth security.
5. Dynamic Ingress & Zero-Downtime Routing: The backend updates the runtime reverse proxy routing table (nginx/portmap.conf) and hot-reloads Nginx without dropping active client connections.
6. Live Telemetry & Logs: Container stdout/stderr logs and live resource utilization (CPU, memory, bandwidth) stream directly to the dashboard over WebSockets.

Core Platform Capabilities

• Intelligent Polyglot & Monorepo Engine: Native detection and zero-config builds for Next.js, Vite/React, Angular, Vue, FastAPI, Flask, Express/Node.js, static sites, fullstack split monorepos (frontend/ + backend/), and custom Dockerfiles.
• Sandboxed Container Runtime: Granular cgroup memory limits, CPU core allocations, health checks, auto-restarts, and secure environment variable injection with Fernet AES-256 encryption.
• One-Click Workspace Databases: Instant provisioning of isolated PostgreSQL databases, schemas, MariaDB instances, and Redis caching nodes with built-in credential management and web UI browsers.
• Dynamic Ingress & Custom Domains: Automatic subdomains under *.rushdeploy.com or custom apex/subdomains with automated SSL certificates, Cloudflare Tunnel integration, and zero-downtime proxy reloads.
• Multi-Tenant Workspaces & RBAC: Organization-style team management with granular roles (Owner, Admin, Operator, Viewer), quota enforcement, and project-level permission boundaries.
• Automated Backup & Restore Engine: Scheduled snapshotting for databases and persistent volumes with point-in-time recovery, one-click rollbacks, and storage offloading (local FS, Cloudinary, S3).
• Built-in Mail Server & Webmail: Integrated mail hosting system with mailbox provisioning, DKIM/SPF DNS management, and a dedicated, lightweight webmail client interface.
• Edge CDN & Firewall Defense: Real-time IP deny-listing, rate limiting, connection throttling, fail2ban integration, and CDN cache invalidation controls.
• Multi-Interface Access: Manage workloads from the React dashboard, the official Node.js CLI (npm install -g rushdeploy), the standalone Python CLI (cli-py), or the integrated browser-based web terminal (cli-ui).

Engineering Highlights & Technical Solutions

• Internal Container Gateway Networking: To let containerized apps talk to host-provisioned PostgreSQL or Redis instances using standard connection strings, RushDeploy handles container DNS and bridge networking routing seamlessly via host gateway resolution (host.docker.internal).
• Concurrent Build Safety: Distributed Celery worker pools prevent build stampedes and filesystem race conditions when multiple microservices or repositories trigger simultaneous deployments.
• Zero-Downtime Hot Proxying: Port mapping is decoupled into a lightweight generated table (portmap.conf), allowing Nginx worker threads to gracefully adopt updated route targets via signals without interrupting existing traffic.
• Robust Multi-Database Engine Abstraction: Dialect-aware schema migrations and FTS search layers maintain seamless dual compatibility across production PostgreSQL clusters and developer SQLite environments.
• Zero External Charting Bloat: Real-time metrics and historical charts are rendered using purpose-built, lightweight SVG coordinate transforms and decimators, ensuring zero dashboard lag even under heavy telemetry streams.

Full Sovereignty, Enterprise Developer Experience

RushDeploy eliminates the trade-off between modern Git-driven deployment automation and sovereign infrastructure control. By delivering a self-contained PaaS control plane that automates container sandboxing, multi-database provisioning, and edge routing on any standard Linux server, it allows developers and teams to deploy scalable applications with confidence, total privacy, and zero monthly cloud platform markups.