Deployment Overview

Vultrino can be deployed in several ways depending on your needs:

Deployment Options

Architecture Considerations

Single Binary

Vultrino is distributed as a single binary with no external dependencies. This includes:

• CLI commands
• HTTP proxy server
• Web UI (embedded)
• MCP server

Storage

Credentials are stored encrypted using AES-256-GCM. Storage options:

• File (default) — Encrypted JSON file on disk
• Keychain — OS keychain integration (coming soon)
• Vault — HashiCorp Vault integration (coming soon)

Network Security

Local Mode (default):

• Binds to 127.0.0.1 only
• No external access
• Suitable for single-machine use

Server Mode:

• Can bind to all interfaces (0.0.0.0)
• Requires additional security measures
• Use with TLS termination proxy (nginx, Caddy)

Security Recommendations

1. Always use HTTPS in production — Use a reverse proxy with TLS
2. Restrict network access — Firewall rules, VPN, or private network
3. Use strong passwords — Both storage and admin passwords
4. Enable audit logging — Track credential usage
5. Rotate API keys — Set expiration on Vultrino API keys
6. Principle of least privilege — Create scoped roles for each application

Quick Comparison

┌─────────────────────────────────────────────────────────────────┐
│                        LOCAL                                     │
│  vultrino serve                                                  │
│  ├── Best for: Personal use, development                        │
│  ├── Security: Localhost only                                   │
│  └── Setup: Minimal                                              │
├─────────────────────────────────────────────────────────────────┤
│                        VPS/SERVER                                │
│  vultrino serve + nginx/caddy                                   │
│  ├── Best for: Team use, production                             │
│  ├── Security: TLS, firewall, auth                              │
│  └── Setup: Moderate (systemd, reverse proxy)                   │
├─────────────────────────────────────────────────────────────────┤
│                        CLOUDFLARE                                │
│  Cloudflare Workers + KV/Durable Objects                        │
│  ├── Best for: Edge deployment, global access                   │
│  ├── Security: Cloudflare's infrastructure                      │
│  └── Setup: Moderate (requires adaptation)                      │
├─────────────────────────────────────────────────────────────────┤
│                        DOCKER                                    │
│  docker run vultrino                                            │
│  ├── Best for: Containerized environments                       │
│  ├── Security: Container isolation                              │
│  └── Setup: Simple (docker-compose)                             │
└─────────────────────────────────────────────────────────────────┘

Next Steps

Choose your deployment method:

• Local Development — Start here for testing
• VPS / Server — Production deployment
• Cloudflare Workers — Edge/serverless deployment
• Docker — Container deployment