Cardea
★ 36European Union Public License 1.2Open Source — No Paywall3 Containers — 3 containers — light hosting footprintDocker · BinaryNo external DB
About
Cardea is an SSH bastion server aimed at small and mid-sized teams that manage infrastructure through code. It lets administrators define access rules in a text file, which makes permissions...
Community Ratings
No ratings yetNew this week
Read recap →Weekly Recap — Sep 11, 2026 – Sep 18, 2026Sep 18, 2026
Features
- Access control rules
- Session recording
- TPM-backed key protection
- Authorized-keys-based access rules
- Known hosts validation
- Connection and forwarding limits
- Rate limiting
- Session retention
- Health/metrics server
- Configurable logging
Details
- Last Updated
- Sep 13, 2026
- Created
- Oct 7, 2025
- Install Methods
- dockerbinary
- Requirements
- SSH clientsTPM device (optional, for TPM mode)No databaseNo web UI
- Authentication
- local
- Backup & Export
- file-backup
- Runtime / Stack
- GoDocker
- Privacy & Independence
- No Cloud RequiredOffline Capable
- Deployment
Deployment: Docker Compose ✓3 Containers — light hosting footprintRuns as 3 containers
Docker Compose
3 services · 2 unclassified (prometheus, grafana)
no resource limits declared
needs persistent storage (6 volumes)
compose.yaml · @ edc427d · scanned Jun 15, 2026
# yaml-language-server: $schema=https://raw.githubusercontent.com/compose-spec/compose-spec/master/schema/compose-spec.json
name: "cardea"
services:
cardea:
image: "cardea"
pull_policy: "build"
build: { context: "./" }
deploy:
mode: "replicated"
replicas: "${CARDEA_REPLICAS:-1}"
restart: "always"
read_only: true
user: "${CARDEA_UID:-1000}:${CARDEA_GID:-1000}"
networks:
- "cardea"
ports:
- "${CARDEA_SSH_PORT_RANGE:-2222-2222}:2222/tcp"
- "127.0.0.1:${CARDEA_HTTP_PORT_RANGE:-9222-9222}:9222/tcp"
volumes:
# ...
Tags
Track your self-hosted stack
Bookmark software to try, rate tools you've used, and keep your collection in one place.
Metadata extracted from README on Jun 7, 2026
Related Software
code-server
79.4k
Runs VS Code in the browser so it can be accessed from any machine anywhere.
IDE ToolsPermissive LicenseSelf Hosting Solutions+1
Puter
43.6k
Puter is an open-source internet operating system for managing files, apps, and games, and for building and publishing web apps and games.
File SynchronizationRemote AccessCopyleft License+4
Sunshine
41.5k
Sunshine is a self-hosted game stream host for Moonlight.
Game Server PanelsVideo StreamingRemote Access+2
herdr
40.6k
Herdr is a background server and terminal workspace for running coding agents, keeping sessions alive, and managing panes from the terminal or over SSH.
Remote AccessAI AgentsAI Harness
qBittorrent
40.3k
qBittorrent is a BitTorrent client built in C++/Qt and powered by libtorrent.
P2P File SharingCopyleft LicenseMedia Management+2
netbird
29.5k
NetBird is a WireGuard-based private networking and access control platform for creating secure overlays and managing remote access.
Network UtilitiesRemote AccessOpen Core+1
3 ContainersOpen Core
Pangolin
22.9k
Pangolin is an identity-based remote access platform that combines reverse proxy and VPN capabilities for secure access to private and public resources.
Web ServersRemote AccessCopyleft License+3
Open Core
Neko
22.4k
Neko is a self-hosted virtual browser that runs in Docker and streams a desktop or browser over WebRTC.
Miscellaneous ToolsSelf Hosting SolutionsRemote Access+3
Single Container
Teleport
20.9k
Teleport is an identity-aware access platform for securing and auditing access to infrastructure, applications, databases, Kubernetes, and cloud services.
Miscellaneous ToolsRemote AccessAuthentication Services+3
Open Core
Coder
16.7k
Coder is a self-hosted platform for cloud development environments and AI coding agents.
IDE ToolsPlatform as a ServiceRemote Access+1
Open Core
Termix
15.2k
Termix is an open-source, self-hosted server management platform for managing servers and infrastructure through a single interface.
Remote AccessWeb File ManagersPersonal Dashboards+3
EasyTier
13.8k
EasyTier is a decentralized virtual private network solution for creating secure peer-to-peer networks across devices and platforms.
Network UtilitiesRemote AccessFully FOSS
Fully FOSS