Self-host Sencho

Sencho is a browser-accessible management layer for Docker Compose that you run on your own infrastructure. It deploys as a single container with access to the host Docker socket, giving it the same capabilities as the docker command line. Through its web interface you control the entire lifecycle of Compose stacks — start, restart, stop, update, and remove — while the original YAML files remain on disk as the canonical reference. The editor provides syntax highlighting, shows a diff before you commit changes, and lets you jump back to any earlier deployment with one click. Handling many servers is a first-class feature: run the same container on each host, then join them using long-lived API tokens or the Pilot Agent, which opens an outbound WebSocket so firewalled or NATed machines need no inbound firewall rules. The fleet view merges logs from every container, streams live resource utilization charts, and performs rollouts that wait for health checks to succeed. Drift detection compares live containers against their Compose definitions and surfaces any differences. Integrated Trivy scanning examines images for CVEs, secrets, and misconfigurations, producing SARIF and SBOM artifacts. Authentication supports local accounts with TOTP, OIDC with ready-made Google, GitHub, and Okta configurations plus arbitrary providers, and LDAP/Active Directory on the paid plan. Five built-in roles with stack- or node-level scope govern permissions. Blueprints let you author a stack once and apply it to labeled nodes, tracking drift per node. Snapshots run on a schedule or manually, capture every stack on every node, restore instantly, and can replicate to any S3-compatible bucket. The built-in catalog offers 199+ curated LinuxServer.io templates and accepts custom Portainer-compatible registries. The Community edition is AGPLv3 with no caps on nodes or users; the Admiral tier adds a hardened image channel, managed backup storage, priority support, and LDAP/AD.