Security

A deployment platform sits close to production. Treat that boundary seriously.

RailDock combines application authentication and authorization with operational guardrails around server access, deploy keys and destructive actions.

organizations + rolesdeploy keysdestructive confirmations
Control-plane access

Separate human access from automated access.

Organizations, membership, invitations and roles shape interactive access. Deploy keys and Git-source integrations give automation and source access their own resources.

◇
Organizations & membersshared control-plane boundaries
RBAC
◇
Deploy keysautomated deployment access
scoped
◇
Server validationexplicit connectivity and provisioning checks
checked
◇
Activity historyoperator and lifecycle events remain visible
logged

Destructive confirmations

Deletion and recovery actions use explicit confirmation behavior instead of casual one-click mutation.

Snapshot-aware recovery

Recovery workflows can preserve a safety snapshot before replacing current datastore state.

Infrastructure stays yours

You retain responsibility for host hardening, firewall rules, SSH trust and secure network exposure.

Security is a deployment concern

Review the trust boundary before exposing the control plane.

Read authentication, server and secret-management guidance as part of installation—not after production is connected.