What Nolay is

What Nolay consists of, what the agent does on your server and what we do not store.

After this page you will understand where each part runs and what permissions Nolay gets on your server.

Three nodes

Node	Where it runs	What it does
Panel	app.nolay.ru, on our side	Interface: servers, projects, deploys, logs, domains
Hub	api.nolay.ru, on our side	Accepts agent connections and passes commands to them
Agent	Your VPS	Builds images, starts containers, runs the proxy and certificates

The connection is outbound only: the agent opens the connection to the hub over WSS itself and listens to nothing. It adds no inbound ports.

Operation	What it does
Deploy	Builds an image and starts a container on your server
Rollback	Returns to the previous version from a stored image
Logs	Reads build and container logs
Variables	Passes environment variables and secrets
Backups	Copies of volumes and database dumps into storage you specified
Domains and TLS	Proxy setup, certificate issue and renewal

The agent has no arbitrary commands: the list of operations is closed. It runs as the user nolay in the docker group, not as root.

Stored	Not stored
Account and organization	Source code
Project settings	Secret values
Deploy history and audit log	Container images
Metrics	Backups and database contents

Secret values live in form fields and travel to the agent, the panel does not save them.

The commands run on your server.

Check that the agent listens to nothing:

ss -tulpn

Check which user the agent runs as:

id nolay

Look at the operations journal:

cat /var/log/nolay/audit.log

Symptom	Cause	What to do
The server shows Offline in the panel	The agent could not open an outbound connection	Check the server network and `systemctl status nolay-agent`
`id nolay` says there is no such user	The installation did not finish	Run the installation again, the script is idempotent

Read What you need before you start and Connecting a server.