ArchitectureSecurity model
The administrator account
A Ferry server has one account. The person who signs in with it controls the full server.
You send your email and your password to the server.
1 / 4
A server has one account: an email and a password of 8 characters or more. The server stores an Argon2id hash of the password, never the password.
The account controls the full server. No other users, roles or permissions per service exist.
How each caller proves its identity
| Caller | Proof |
|---|---|
| You, in the dashboard | Your email and password, then the session cookie |
| The CLI, scripts and CI | An API token |
| Scripts on the server | The server token |
| A deploy hook | The key in its URL |
| GitHub | The signature of each delivery |
Create or repair the account
- A new server has no account. Create it with the setup code.
- If you forget the password, replace it on the server.