Concepts
Core concepts and architecture of the ACT platform
Core Concepts
Understanding these core concepts will help you get the most out of ACT.
Architecture Overview
ACT is built around a simple but powerful architecture:
┌─────────────────────────────────────────────────────────┐
│ ACT Dashboard │
│ (act-web) │
└─────────────────────┬───────────────────────────────────┘
│ REST API
┌─────────────────────▼───────────────────────────────────┐
│ ACT API │
│ (act-api) │
│ ┌─────────┐ ┌─────────┐ ┌─────────┐ ┌─────────┐ │
│ │ Servers │ │Services │ │ Deploy │ │ Backups │ │
│ └─────────┘ └─────────┘ └─────────┘ └─────────┘ │
└─────────────────────┬───────────────────────────────────┘
│ SSH
┌─────────────────────▼───────────────────────────────────┐
│ Your Servers │
│ ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ │
│ │ Traefik │ │ Your App │ │ Docker │ │
│ │ (Proxy) │ │ (Container) │ │ Engine │ │
│ └─────────────┘ └─────────────┘ └─────────────┘ │
└─────────────────────────────────────────────────────────┘
Servers
A Server is a Linux host that ACT manages. When you commission a server, ACT:
- Installs Docker
- Configures log rotation
- Sets up the
act-networkDocker network - Deploys Traefik as the ingress proxy
- Configures firewall rules (UFW)
Services
A Service is an application you want to deploy. Each service has:
- Name: Unique identifier
- Repository: Git URL for your source code
- Dockerfile: Path to your Dockerfile (default:
Dockerfile) - Domain: The public domain for your service
- Environment Variables: Configuration and secrets
Blue/Green Deployments
ACT uses blue/green deployments for zero-downtime updates:
- Build: ACT builds a new container image
- Deploy Blue: The new version starts as the “blue” container
- Health Check: ACT verifies the new container is healthy
- Switch Traffic: Traefik routes traffic to the new container
- Cleanup: The old “green” container is removed
If anything fails, traffic stays on the old container.
Traefik Integration
ACT uses Traefik as the reverse proxy:
- Automatic HTTPS: Let’s Encrypt certificates
- Docker Integration: Auto-discovers containers via labels
- Load Balancing: Routes traffic to healthy containers
- Middleware: Redirects, headers, rate limiting
Next Steps
- Deployments - Deep dive into the deployment process
- Networking - How services communicate
- Storage - Volumes and persistent data
Pages
View Modes & Hierarchy
Understand the abstraction layers: Simple Mode vs. Advanced Mode.
Deployment Strategies
Blue/Green vs. Recreate - choosing the right deployment strategy for your application.
WireGuard Mesh
Safety Mode
Security Architecture
Details on ACT's security model, encryption, and key management.
Build Pipeline
Networking & Firewall Configuration
Understanding ACT's network architecture and required firewall rules