A high-performance, zero-overhead deployment engine that extends the Docker Compose workflow to cloud infrastructure via SSH
A high-performance, zero-overhead deployment engine that extends the Docker Compose workflow
to cloud infrastructure via SSH. Graft enables native remote management of AWS, GCP, and VPS
instances with no agent installs or server-side overhead required. With V2.0 Graft is now
optimized for git and github actions ci/cd flow
Service Scaling: Scale any service to N replicas with [graft scale ] — Traefik load balances automatically. Scale persists through deploys.
PSQL Passthrough: Full psql passthrough with env-aware auto-connect. Supports all native psql flags (-c, -f, -t, etc.).
Isolated DB Credentials (Security): Each database gets a dedicated Postgres user and password. Admin credentials never leak to project secrets.
Per-Environment Database Linking: Database auto-linked per environment. [graft psql] connects to the right db for the current env.
Unified DB Init: Initialize databases from project scope, host scope [graft host db], or registry scope [graft -r db]. All paths prompt to link with overwrite protection.
SSH Database Tunnel: [graft db serve :port] tunnels remote Postgres to localhost via SSH for local dev tools. No public port exposure.
Generic Service Tunnel: [graft host tunnel :port] tunnels any Docker container to localhost. Auto-detects exposed ports.
SSH Connection Reliability: Multiple concurrent sessions and tunnels no longer hang. The liveness probe, SSH handshake and authentication, channel opens, and SFTP startup are all bounded by timeouts, so a half-dead connection fails fast and self-heals instead of blocking forever.
Faster Connections: SFTP starts only when a command actually transfers files, and tunnels no longer spend a network round trip probing liveness before each forwarded connection.
known_hosts Correctness (Security): Non-default ports are recorded in the format the lookup uses, so repeat connections stop appending duplicates. An unreadable known_hosts is reported instead of silently skipping host key verification.
Environment Listing: [graft env ls] shows all environments with registry, domain, and mode.
Graft SSH Key: Manage SSH keys with [graft pub] and rotate with [graft pub rollout].
Cloudflare API Integration: Automated DNS zone mapping based on Traefik host labels.
Cloudflare Zone Registry: Manage multiple Cloudflare accounts and zones with an interactive selection menu.
Database Backup Automation: Backup infrastructure databases to S3/R2 (Experimental).
Rollback to versions: Rollback and revert changes to previous deployments.
Docker Passthrough Commands: Execute docker commands on remote hosts or registries via Graft.
Optimized for Git and GitHub Actions CI/CD flows.
Multi-environment support with separate configs, workflows, and DNS.
