Nothing on the server
The box runs SSH and Caddy; your app is one executable behind a health check.
homeport
Deploy single-binary web apps to your own VPS. No Docker, no registry, no runtime on the server. One command hardens a fresh box; one command deploys.
Why binaries
Atomic deploys
Upload beside the old release, health-check, flip a symlink. Rollback is flipping it back.
Hardened by default
Bootstrap sets up key-only SSH, no root login, a firewall, fail2ban, auto security updates.
Your keys, your box
Secrets travel over ssh stdin, never argv or git. A leaked CI key is scoped to one app.