A web UI for HashiCorp Nomad that runs on Cloudflare Workers or in Docker. Formerly Nomad Compass.
- Shows cluster health, resource usage, stability alerts and recent activity on one dashboard.
- Creates, edits, clones and deletes jobs: containers, resources, environment variables, ports, service health checks, private registries and Traefik ingress tags.
- Shows the plan diff before a job is submitted, and reverts a job to any earlier version.
- Tracks rolling deployments with real-time status, canary indicators, one-click canary promotion, and pause/resume/fail controls.
- Scales task groups dynamically (+/- stepper, presets, zero-scale warning, and optional reason) without resubmitting full job specs.
- Creates periodic (cron) batch jobs, runs them on demand, pauses their schedule and lists their launches.
- Dispatches parameterized jobs with their meta keys and a text or file payload, and lists their dispatched jobs.
- Streams task logs with stdout/stderr filtering.
- Opens a terminal in a running task. The ACL token stays in an
httpOnlycookie and never appears in a URL. - Browses the files of an allocation, also a finished or failed one, with syntax highlighting and downloads.
- Lists allocations, failed allocations, nodes, servers and the cluster topology.
- Restarts, signals and stops single allocations, and reschedules the failed allocations of a job.
- Manages ACL policies (visual or HCL editor), roles and tokens, and creates and deletes namespaces.
- Manages encrypted Nomad variables and secrets with masked value inspection, search, and form/JSON editors.
- Manages Node Pools and scheduler algorithms (spread vs binpack) across cluster nodes.
- Lists CSI volumes of all namespaces and their plugins, registers and deregisters volumes, and takes volume snapshots.
- Works on mobile as an installable Progressive Web App (PWA) with a bottom navigation bar, touch-friendly card views, floating actions, offline app shell caching, and virtual terminal keys.
- Has light, dark and system themes.
With Docker, point the published image at your Nomad API:
docker run -p 3000:3000 \
-e NOMAD_ADDR=http://your-nomad:4646 \
-e TICKET_SECRET=$(openssl rand -hex 32) \
ghcr.io/ingvarch/ovoo:latestOpen http://localhost:3000 and paste your ACL token.
From source, you need Bun 1.2+:
git clone https://github.com/ingvarch/ovoo.git
cd ovoo
bun install
cp .dev.vars.example .dev.varsIn .dev.vars, set NOMAD_ADDR to your Nomad API and TICKET_SECRET to the
output of openssl rand -hex 32. Then run bun run dev, open
http://localhost:5173 and paste your ACL token.
- Usage: signing in, dashboard, jobs, logs, remote exec, allocations, topology, nodes, node pools, servers, activity, namespaces, variables & secrets, ACL, and mobile PWA.
- Configuration: environment variables, the ticket
secret and local
.dev.vars. - Deployment: Cloudflare Workers, Docker, Compose, running behind a reverse proxy, release images.
- Development: dev modes, commands, project structure and tech stack.
- Security: cookies, CSRF, rate limits, signed WebSocket tickets.
- Traefik guides: Traefik as ingress for Nomad jobs, with the ingress options of the job form.
How to build ovoo, run the checks and send a change is in CONTRIBUTING.md. Security problems are reported privately, see SECURITY.md.
MIT, see LICENSE.
Nomad is a trademark of HashiCorp. ovoo is an independent project and is not affiliated with or endorsed by HashiCorp.
An ovoo is a Mongolian cairn: a heap of stones on a hilltop or a mountain pass. On the open steppe you see one from far away, and it tells you where you are and which way the road goes.
A cluster is that steppe. This is the landmark you check first.