Gordon

The server combines a private Docker registry, reverse proxy, admin API, and CLI in one Go binary. A push to the registry can resolve a route, start the new container, update proxy state, and drain the old one.

The code follows a hexagonal layout with adapters for Docker/runtime operations, HTTP handlers, filesystem storage, and CLI commands. The config covers TLS/ACME, auth, rate limiting, network isolation, backups, secrets, volumes, previews, and deployment readiness checks.