LET’S GET THIS RACCOON TO WORK

Your infrastructure.
Meet Mr Patchy.

Install the controller, configure secure access and welcome your first server. Start with Docker Compose on your own Linux host.

Mr Patchy, a grinning raccoon in colorful patched overalls

Before you start

Free for personal, noncommercial use and for nonprofits and local governments running their own systems. Commercial use and other organizational use require a separate paid license before deployment. Review licensing.

  • Linux host with Docker Engine & Compose v2
  • Git and persistent storage for the controller
  • A DNS name and HTTPS access for your administrators
  • SSH reachability to targets and HTTP(S) access to repositories
01

GET THE SOURCE

Make a little room for Patchy.

Clone the repository and create your deployment configuration.

BASH
git clone https://github.com/StealthCat/MrPatchy.git
cd MrPatchy
cp .env.example .env
02

CONFIGURE YOUR CONTROLLER

Give your workbench an address.

Edit .env before starting. Use your own hostname and a unique password of at least 12 characters. Match PUBLIC_URL to the full address administrators and targets will use.

DOTENV
ADMIN_PASSWORD=REPLACE_WITH_A_LONG_UNIQUE_PASSWORD
DOMAIN=patchy.example.com
PUBLIC_URL=https://patchy.example.com
Using alternate ports or a LAN-only interface?

Add the bindings below, replacing the example IP and hostname. Change all control-network settings if 172.30.254.0/24 overlaps an existing network.

DOTENV
BIND_IP=192.168.1.20
HTTP_PORT=8080
HTTPS_PORT=8443
PUBLIC_URL=https://patchy.example.com:8443
03

START THE WORKBENCH

All paws on deck.

Build and start the app, worker and Caddy services.

BASH
docker compose up -d --build
docker compose ps

The default deployment uses SQLite. MySQL and worker scaling are available when you need them.

04

TRUST & SIGN IN

A secure first hello.

The initial HTTPS certificate uses Caddy’s local CA. Copy its public root certificate, then trust it on your administrator device before signing in.

BASH
docker compose cp caddy:/data/caddy/pki/authorities/local/root.crt ./mrpatchy-local-ca.crt

Open https://YOUR_DOMAIN. Sign in as admin with the ADMIN_PASSWORD you configured. For alternate ports, use your complete PUBLIC_URL.

Changing ADMIN_PASSWORD in .env later does not reset an existing account. Use the local password-reset workflow.

05

WELCOME YOUR FIRST SERVER

Time to meet the fleet.

Add an endpoint, run its personalized installer and verify the SSH fingerprint through a trusted console. Mr Patchy independently checks the installation before marking it complete.

Follow the enrollment guide
Three-step server enrollmentOffline preparation or expiring HTTPS delivery.

Actual application interface with illustrative documentation data.