LET’S GET THIS RACCOON TO WORK
Your infrastructure.
Meet Mr Patchy.
Install the controller, configure secure access and welcome your first server. Start with Docker Compose on your own Linux host.

Before you start
Free for personal, noncommercial use and for nonprofits and local governments running their own systems. Commercial use and other organizational use require a separate paid license before deployment. Review licensing.
- Linux host with Docker Engine & Compose v2
- Git and persistent storage for the controller
- A DNS name and HTTPS access for your administrators
- SSH reachability to targets and HTTP(S) access to repositories
GET THE SOURCE
Make a little room for Patchy.
Clone the repository and create your deployment configuration.
git clone https://github.com/StealthCat/MrPatchy.git
cd MrPatchy
cp .env.example .envCONFIGURE YOUR CONTROLLER
Give your workbench an address.
Edit .env before starting. Use your own hostname and a unique password of at least 12 characters. Match PUBLIC_URL to the full address administrators and targets will use.
ADMIN_PASSWORD=REPLACE_WITH_A_LONG_UNIQUE_PASSWORD
DOMAIN=patchy.example.com
PUBLIC_URL=https://patchy.example.comSTART THE WORKBENCH
All paws on deck.
Build and start the app, worker and Caddy services.
docker compose up -d --build
docker compose psThe default deployment uses SQLite. MySQL and worker scaling are available when you need them.
TRUST & SIGN IN
A secure first hello.
The initial HTTPS certificate uses Caddy’s local CA. Copy its public root certificate, then trust it on your administrator device before signing in.
docker compose cp caddy:/data/caddy/pki/authorities/local/root.crt ./mrpatchy-local-ca.crtOpen https://YOUR_DOMAIN. Sign in as admin with the ADMIN_PASSWORD you configured. For alternate ports, use your complete PUBLIC_URL.
Changing ADMIN_PASSWORD in .env later does not reset an existing account. Use the local password-reset workflow.
WELCOME YOUR FIRST SERVER
Time to meet the fleet.
Add an endpoint, run its personalized installer and verify the SSH fingerprint through a trusted console. Mr Patchy independently checks the installation before marking it complete.
Follow the enrollment guide