____ _ _
| __ ) _ _| |_ ____ _ _ __| | __
| _ \| | | | \ \ /\ / / _` | '__| |/ /
| |_) | |_| | |\ V V / (_| | | | <
|____/ \__,_|_| \_/\_/ \__,_|_| |_|\_\
Your entire server, one dashboard.
Bulwark is an AI-powered, self-hosted server management platform that replaces your collection of DevOps tools with a single glass-themed dashboard. Terminal, database studio, Docker management, Git workflows, security scanning, and real-time monitoring — all in one place.
No vendor lock-in. No cloud dependency. Your server, your data, your AI subscription.
- Terminal — Full xterm.js terminal with node-pty, right in your browser
- AI-Powered DB Studio — Supabase-style database management with Claude/Codex SQL generation, security audits, and backup strategy analysis
- Docker Management — 27 native Docker Engine API endpoints, container lifecycle, logs, stats
- Git + Deploy Pipeline — Commit, push, branch management, deployment with rollback
- Security Scanning — Vulnerability scanning, SSL certificate management, credential vault (AES-256-GCM)
- Real-time Monitoring — CPU, memory, disk, process list via Socket.IO (3s refresh)
- Uptime Monitoring — HTTP/TCP health checks with history and alerting
- RBAC + Audit Logging — Admin/editor/viewer roles, every API call logged
- Cloudflare Integration — DNS and tunnel management
- Calendar + Briefings — AI-powered scheduling and daily summaries
- Multi-Server — Manage multiple servers from one dashboard
- Cron, Files, Env Vars — Full server management without SSH
git clone https://github.com/bulwark-studio/bulwark.git
cd bulwark
npm install
MONITOR_USER=admin MONITOR_PASS=changeme npm start
# Open http://localhost:3001docker build -t bulwark .
docker run -d -p 3001:3001 \
-e MONITOR_USER=admin \
-e MONITOR_PASS=changeme \
-e DATABASE_URL=postgresql://user:pass@host:5432/db \
bulwarkcurl -fsSL https://bulwark.studio/install.sh | bashgraph TB
Browser["Browser (Vanilla JS)"] -->|HTTP + WebSocket| Server["Express + Socket.IO :3001"]
Server --> Routes["31 Route Modules"]
Server --> Libs["13 Shared Libraries"]
Routes --> PG["PostgreSQL 17"]
Routes --> Docker["Docker Engine API"]
Routes --> System["System (CPU/Mem/Disk)"]
Routes --> AI["AI CLI (Claude/Codex)"]
Libs --> Auth["PBKDF2 + TOTP 2FA"]
Libs --> RBAC["RBAC + Audit"]
Libs --> Vault["AES-256-GCM Vault"]
Libs --> Cache["Neural Cache"]
Stack: Express.js + Socket.IO | Vanilla JS frontend (no build step) | PostgreSQL 17 | xterm.js + node-pty | Chart.js | CodeMirror 5
31 route modules | 13 libraries | 34 views | 267+ API endpoints | 4 npm dependencies
Bulwark uses a Bring Your Own Key model. You install the AI CLI tools on your server and authenticate with your own subscriptions. Zero AI cost for Bulwark.
| Provider | Command | Requirement |
|---|---|---|
| Claude CLI | claude --print |
Anthropic subscription |
| Codex CLI | codex |
OpenAI API key |
| None | — | AI features disabled |
Configure in Settings > AI Provider. Bulwark auto-detects installed CLIs.
- SQL generation from natural language
- Database role security auditing with scoring
- Backup strategy analysis with disaster recovery planning
- Commit message generation
- Daily briefing summaries
AI-Powered Dashboard — health score, briefing, command hub, live metrics
 |
 |
| SQL Editor — Syntax highlighting, AI query generation | Docker Fleet — Container management, log streaming |
 |
 |
| Terminal AI — Full PTY + natural language commands | Kanban Tickets — AI triage across 7 stages |
 |
 |
| Table Browser — Two-panel explorer with constraints | Roles — AI security audit, permission heatmap |
 |
 |
| Metrics — CPU/memory/disk gauges, AI analysis | Uptime — Health checks, response times, history |
 |
 |
| Schema — Functions, triggers, extensions, indexes | Backups — AI strategy, DR plan, health indicators |
| Variable | Default | Description |
|---|---|---|
MONITOR_PORT |
3001 |
Server port |
MONITOR_USER |
— | Default admin username (required on first run) |
MONITOR_PASS |
— | Default admin password (required on first run) |
DATABASE_URL |
— | PostgreSQL connection string |
VPS_DATABASE_URL |
— | Secondary DB connection (optional) |
REPO_DIR |
cwd | Repository root for Git/Deploy operations |
Create a .env file in the project root or set environment variables directly.
Bulwark features a glass-morphism dark theme with cyan/orange signal system:
- Cyan (#22d3ee) — success, healthy, active, positive
- Orange (#ff6b2b) — error, warning, destructive, down
- Glass cards with
backdrop-filter: blur()and border highlights - JetBrains Mono typography throughout
Full docs at bulwark.studio/docs — installation, configuration, all 34 views, API reference, AI setup, and troubleshooting.
See CONTRIBUTING.md for development setup, code style, and PR guidelines.
AGPL-3.0 — Free to use, modify, and self-host. If you offer Bulwark as a hosted service, you must open-source your modifications.
Express.js | Socket.IO | PostgreSQL | xterm.js | Chart.js | CodeMirror
Autopilot AI Tech LLC | bulwark.studio | @BulwarkStudio