kserpa — agent-operable VPS control plane
A GitOps platform I designed and operate so production changes can be made from chat (Grok + MCP tools)
without SSH paste rituals. Control plane, lab proofs, and multi-repo product apps are separated on purpose:
each product is its own GitHub repo, built into its own container, and fronted by Caddy with automatic HTTPS.
This page itself is product web — own repo, own image, deployed through that exact pipeline.
- Layered design: control plane (host-control, docker-apps, caddy-proxy, github-ops, DNS, VPN) separate from lab proofs and product apps.
- Multi-repo products: registry + per-app checkout under
/srv/products/, independent deploys, hard-stop if build or git push fails. - Agent-safe ops: skill-encoded rules forbid monorepo product UI and Caddy static serving for apps — Chat must follow GitOps.
- This site: the page you are reading is product
web— own repo, own image, deployed through that pipeline.