The whole interface, nothing staged

• DashboardHost facts, disk usage, resource breakdown, Top talkers and running containers — updating off the Docker events stream.
• ResourcesCPU, memory and network per container, refreshed every 5 s, with host totals above.
• Resources — stacksThe same figures rolled up per Compose stack.
• Resources — networkTop talkers averaged over a stored 5 min / 15 min / 1 h window, not a jittery point sample.
• Resources — diskEvery image, container, volume and build-cache record by size, with shared layers counted once and what a prune would free.
• Container detailLive CPU and memory with history, plus tabs for logs, an interactive console, processes, files, filesystem changes and env.
• Aggregated logsMany containers in one stream, color-coded by source, with level filters, regex search, structured parsing and a download of the filtered view.
• Network topologyForce-directed graph of containers and the networks they sit on, with pan, zoom, search and compose-stack filtering.
• EventsThe live Docker events feed, filterable — the same stream the dashboard and alert engine react to.
• ContainersEvery container across the selected host, with state, image, stack, ports, one-click lifecycle actions and bulk select for restart, stop, start and pull.
• ImagesPull with live progress, build, push, tag, save and load — plus Trivy vulnerability scanning with bulk CVE triage.
• VolumesBrowse, upload, download and extract archives straight into a volume via a helper container.
• NetworksCreate, inspect and prune networks, and connect or disconnect containers.
• Network detailPer-network view as a graph or a list, showing what is attached and on which ports.
• Deploy previewWhat a deploy would change — digest drift, env, image, ports — each flagged when it recreates the container, with Ignore and Reconcile now.
• Deploy historyEvery deploy as a revision with the images it ran — diff against what runs now, or restore.
• Compose editorCodeMirror with live inline validation, schema-aware autocomplete, a resolved preview and a ports summary.
• Project secretsNamed values referenced as ${NAME} from compose — encrypted, injected at deploy time, never read back.
• DomainsA hostname per service, served by the opt-in embedded proxy with its own Let’s Encrypt certificate.
• Policy rulesSeven deploy-time rules, each off, warn or block — checked before anything reaches the host.
• ProjectsManaged compose folders with profiles, .zip import and export, and deployment to a local or remote host.
• StacksCompose stacks discovered by label, including CLI-created ones: start, stop, restart, remove, edit and redeploy.
• TemplatesBuilt-in and user presets, reusable service blocks and shared definitions, with a live compose preview.
• Alert feedOne row per condition — “still firing · 27m” and a repeat count instead of forty identical rows.
• Alert rulesState, resource, network, log-pattern and crash-loop rules with severity and cooldown, notifying webhooks and email.
• Maintenance windowsSilence delivery for planned work — one-off or weekly — while alerts are still recorded.
• Top talkersThe dashboard panel ranking containers by throughput over a stored window.
• HostsLocal, TCP+TLS and SSH daemons side by side, with hardware, OS and engine detail — and a disable switch.
• Users & rolesNamed roles, per-host scoping and read-only accounts, with TOTP 2FA or a passkey enforced by default.
• Profile & sessionsEvery account self-serves its own second factors and password, and can see and end its own live sessions by device and address.
• Audit logWho did what, when, how and on which host — searchable, and scoped to the hosts the reader may see.
• RegistriesPrivate registry credentials, encrypted at rest, used for autocomplete, builds and deploys.
• Backup jobsYour own restic, borg or script run against a volume or a whole project, with run history.
• Recovery bundleEverything Docker Commander knows in one encrypted file — inspected against the target before import.
• Data retentionA daily purge with a limit per area — alert events, deliveries, audit log, revisions.
• SettingsFeature flags, security, policy rules, MCP administration, recovery, LDAP and email — tabbed, all in one place.
• MCP accessSelf-service bearer tokens for AI tools, scoped to a subset of sections and optionally read-only, with per-session revocation.
• MCP administrationAdmin view of issued tokens, OAuth clients and every user’s connector sessions.

Nothing in this area.