DevMonk Connect
Documentation

# 1. Install nginx and certbot
apt install nginx certbot python3-certbot-nginx

# 2. Get a TLS certificate (replace with your domain)
certbot --nginx -d app.yourdomain.com

# 3. Create nginx config
cat > /etc/nginx/sites-available/devmonk << 'EOF'
server {
    listen 443 ssl;
    server_name app.yourdomain.com;

    ssl_certificate     /etc/letsencrypt/live/app.yourdomain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/app.yourdomain.com/privkey.pem;

    location / {
        proxy_pass http://127.0.0.1:7474;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_read_timeout 3600;
    }
}
EOF

ln -s /etc/nginx/sites-available/devmonk /etc/nginx/sites-enabled/
nginx -t && systemctl reload nginx

# Monitor CPU and memory in real time
htop

# Watch live logs from a service
journalctl -u myapp -f

# Check disk usage
df -h

# Run a long job that keeps running even if you close the tab
nohup ./my-script.sh > output.log 2>&1 &

# Use tmux to keep multiple panels (persists across reconnects)
tmux new -s main

# Install WireGuard
apt install wireguard

# Open the VPN port in the firewall
ufw allow 51820/udp

# Enable IP forwarding (allows VPN traffic to route)
echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf
sysctl -p

# Copy the config file (downloaded from the dashboard)
sudo cp mypeer.conf /etc/wireguard/devmonk.conf
sudo chmod 600 /etc/wireguard/devmonk.conf

# Start the VPN tunnel
sudo wg-quick up devmonk

# Auto-connect on boot
sudo systemctl enable wg-quick@devmonk

# Check the tunnel is active
sudo wg show

# Stop the tunnel
sudo wg-quick down devmonk

# Test the connection
ping 10.100.0.1

# SSH to your server (no public SSH port needed)
ssh user@10.100.0.1

# Access the agent dashboard privately
# Open in browser: http://10.100.0.1:7474

# Access any service on the server (e.g. database, dev server)
# http://10.100.0.1:3000  — a web app on port 3000
# psql -h 10.100.0.1 -U myuser mydb  — PostgreSQL

# Install a lightweight desktop (XFCE is recommended for VPS)
apt install xfce4 xfce4-goodies scrot xvfb

# Start a virtual 1080p display
Xvfb :1 -screen 0 1920x1080x24 &
export DISPLAY=:1

# Start the desktop
xfce4-session &

# Create a systemd service for the virtual display
cat > /etc/systemd/system/devmonk-desktop.service << 'EOF'
[Unit]
Description=Virtual Desktop for DevMonk Remote
After=devmonk-agent.service

[Service]
ExecStart=/usr/bin/Xvfb :1 -screen 0 1920x1080x24
Restart=always

[Install]
WantedBy=multi-user.target
EOF

systemctl enable --now devmonk-desktop

# Tell the agent to capture display :1
systemctl edit devmonk-agent
# Add these lines in the editor:
# [Service]
# Environment=DISPLAY=:1

systemctl restart devmonk-agent

# Install Docker
apt install docker.io
systemctl enable --now docker

# If the agent isn't running as root, add it to the docker group
usermod -aG docker devmonk
systemctl restart devmonk-agent

apt install nginx certbot python3-certbot-nginx

oauth:
  redirect_base: "https://app.yourdomain.com"
  google:
    client_id: "123456.apps.googleusercontent.com"
    client_secret: "GOCSPX-..."
  github:
    client_id: "Ov23li..."
    client_secret: "abc123..."

curl -fsSL https://get.devops-monk.com/dmctl | bash

dmctl login
# Agent URL: https://app.yourdomain.com
# Username:  admin
# Password:  ••••••••
# ✓ Logged in — config saved to ~/.config/devmonk/dmctl.yaml

dmctl status
# Agent:    https://app.yourdomain.com
# Version:  1.12.0
# Uptime:   4d 2h 17m
# Platform: linux/amd64

# List all VPN peers
dmctl vpn list

# Add a new peer (prints the WireGuard config)
dmctl vpn add "My Laptop"

# Get config for an existing peer
dmctl vpn config <peer-id>

# Remove a peer (revokes access immediately)
dmctl vpn remove <peer-id>

# List files
dmctl files list
dmctl files list /var/log

# Create a directory
dmctl files mkdir /home/user/backups

# Delete a file
dmctl files delete /home/user/old.log

# List containers
dmctl docker ps

# Start / stop / restart
dmctl docker start <container-name>
dmctl docker stop <container-name>
dmctl docker restart <container-name>

# List services
dmctl expose list

# Expose a local port with a domain + TLS
dmctl expose add --name "My App" --domain app.yourdomain.com --port 3000

# Remove a service
dmctl expose remove <service-id>

# Renew TLS certificate
dmctl expose renew <service-id>

# On the home server:
curl -fsSL https://get.devops-monk.com | bash

# Create your account at http://<home-ip>:7474/setup

# Add your laptop as a VPN peer (from the dashboard)
# VPN → Add peer → "Work Laptop" → download config → import into WireGuard

# Now from anywhere in the world:
# - Open browser → http://10.100.0.1:7474 → full dashboard
# - Terminal → run commands on your home server
# - Files → grab files from home
# - SSH over VPN (no open ports needed):
ssh user@10.100.0.1

# 1. Open the web terminal on the VPS
#    Dashboard → Terminal

# 2. Start your dev environment
docker-compose up -d

# 3. Expose the dev server publicly with HTTPS
dmctl expose add --name "Dev App" --domain dev.yourdomain.com --port 3000

# 4. Open https://dev.yourdomain.com in another tab — test the app

# 5. Use Files to upload/download assets
#    Dashboard → Files

# 6. Monitor containers
#    Dashboard → Docker → click Logs

# On each Pi — same install command
curl -fsSL https://get.devops-monk.com | bash

# On the main Pi — add others as VPN peers
dmctl vpn add "Pi Sensor 1"   # copy config to pi-1
dmctl vpn add "Pi Sensor 2"   # copy config to pi-2

# Register them in the Fleet
# Dashboard → Fleet → Register agent
# URL: http://10.100.0.2:7474 (Pi Sensor 1's VPN IP)

# Now monitor all Pis from the Fleet page
# Ping any Pi, see its version and last-seen time

# Step 1: Install the agent on the MacBook
curl -fsSL https://get.devops-monk.com | bash
devmonk-agent   # runs on http://localhost:7474

# Step 2: On your VPS — add the MacBook as a VPN peer
# Dashboard → VPN → Add peer → "MacBook"
# Download the config file

# Step 3: On the MacBook — import the WireGuard config
# WireGuard app → + → Import tunnel → select the .conf → Activate

# Step 4: MacBook is now at e.g. 10.100.0.3 (shown in VPN Peers list)

# Step 5: From anywhere:
# Open http://10.100.0.3:7474 → MacBook's agent dashboard
# Terminal → shell on the MacBook
# Files → browse MacBook files
ssh yourusername@10.100.0.3   # SSH to MacBook

# Owner creates accounts for each person
# Dashboard → Users → Add user
# alice → admin (full access)
# bob   → viewer (read-only, can see logs but not change things)

# Each person installs dmctl on their laptop
curl -fsSL https://get.devops-monk.com/dmctl | bash
dmctl login   # their own credentials

# Audit log tracks everything
# Dashboard → Audit → see who did what and when

which devmonk-agent            # check it's installed
devmonk-agent                  # run directly to see errors
systemctl status devmonk-agent
journalctl -u devmonk-agent -n 50
curl http://localhost:7474/api/health

wg show                        # check WireGuard tunnel
ufw status | grep 51820        # check port is open
sysctl net.ipv4.ip_forward     # must be 1

apt install docker.io
systemctl enable --now docker
usermod -aG docker devmonk     # if agent isn't root
systemctl restart devmonk-agent

nginx -t                       # test nginx config
certbot --version              # check certbot installed
dig A blog.yourdomain.com      # check DNS points here
nginx -t && systemctl reload nginx

dmctl login    # re-authenticate — credentials may have changed