Featured DevOps Project
Pingexa
Open-Source Uptime Monitoring · Self-Hosted
Pingexa is an open-source, self-hosted monitoring platform for public HTTP and HTTPS endpoints. Its Express API and BullMQ worker run from the same application image with separate commands. PostgreSQL remains the scheduler source of truth while Redis transports queued monitoring work.
The production stack runs through Docker Compose behind Caddy with automatic HTTPS, while Nginx serves the frontend application. PostgreSQL and Redis remain isolated on an internal Docker network without publicly exposed ports.
Every push to main passes lint, type checking, unit and integration tests before commit-SHA-tagged images are published to GHCR. Deployment runs over SSH, applies database migrations, verifies the public service and automatically rolls back when verification fails.
Security controls include Argon2id password hashing, opaque server-side sessions, CSRF protection and an SSRF guard that validates and pins outbound monitoring targets.
CI-Gated Deploys with Automatic Rollback
Architecture
- Postgres-backed scheduler with Redis job transport
- Separate API and worker processes from one application image
- Private data network for PostgreSQL and Redis
- Automatic HTTPS through Caddy and Let’s Encrypt
- Commit-SHA container images published to GHCR
- Migration, public verification and automatic deployment rollback
