No SSH, no deploy port
CI reaches the agent over a private Tailscale network. Your reverse proxy still serves the app on 80 and 443.
statio ships your Docker image to your own server with a git push. Your GitHub Actions workflow
builds and signs the image. An agent on your server receives it, checks the signature against the
repo you authorised, and recreates the container.
git push ─▶ CI builds and signs ─▶ agent on your server ─▶ deployedNo SSH, no deploy port
CI reaches the agent over a private Tailscale network. Your reverse proxy still serves the app on 80 and 443.
Signed deploys only
The agent verifies a keyless cosign signature before it runs anything.
Domain and DNS included
The agent configures NPMplus and Cloudflare during the deploy, with credentials the workflow never sees.
One Actions step
Build, sign and deploy in a single step. No deploy scripts.
On the server:
curl -fsSL https://statio.accentio.dev/install.sh | sudo shstatio.yaml, the CLI, the Action, the pipeline
and every error code.