What runs where
Two pieces: The panel is what you are looking at. It holds the record of every server, site, database and certificate, and it queues work. The agent runs on every managed server. It polls the panel over HTTPS for work, runs it, and streams the output back. Because it reaches out rather than being reached, a managed server needs no inbound firewall rule for Shipways, and a machine that has moved to a new address goes on working. Every server holds its own bearer token, so a compromised machine can only ever speak for itself. Agents in the field outlive panel releases, so the agent version is reported on every heartbeat rather than assumed.What a machine has to be
A fresh Ubuntu 22.04 or 24.04 machine that Shipways can reach over SSH as root. Fresh matters. Provisioning replaces the SSH, firewall and web server configuration, so pointing Shipways at a machine that is already serving something will take that something down.Where to start
- Connect a server. Provisioning starts by itself once the agent reports in.
- Add a site. It serves a holding page straight away; nothing is deployed until you ask for it.
- Point DNS at the machine, then request a certificate.
- Deploy.