Loading...
A unified enterprise IT automation platform designed for modern infrastructure. Draft complex topologies with natural language, enforce Role-Based Access Control, manage server inventories, and execute remote commands securely across Linux and Windows fleets.
FlowForge enforces strict Role-Based Access Control (RBAC) at both the UI and REST API layers. Users are organized into three distinct tiers with granular operational boundaries.
The emergency system setup operator. Validates credentials solely via local database fallback without requiring Active Directory or LDAP connectivity. Locked to Admin level — cannot be demoted or deleted.
IT Operators responsible for architecting automation workflows, registering server inventories, and managing infrastructure. Authenticated via Active Directory or local credentials.
Support personnel, database operators, or server engineers who run pre-approved, safe automation tasks. Cannot modify DAG topologies, add servers, or open raw SSH shells.
| Feature / UI Module | Super Admin | Administrator | Standard User |
|---|---|---|---|
System Dashboard / |
Full Access | Full Access | Assigned Only |
Workflows Directory /workflows |
View & Execute All | View, Edit, Execute | Execute Assigned |
Visual Canvas Editor /workflows/:id |
Authorized | Authorized | Blocked |
| AI Workflow Generator (Groq LLM) | Authorized | Authorized | Blocked |
Servers Inventory /servers |
Authorized | Authorized | Blocked |
| OpenSSH Win Script Generation | Authorized | Authorized | Blocked |
Interactive SSH Terminal /terminal |
Authorized | Authorized | Blocked |
Audit Logs /audit-logs |
View All Logs | View All Logs | Own Logs Only |
Users & Access Panel /users |
Full Access | Full Access | Blocked |
| Promote / Demote Admins | Authorized | Authorized | Blocked |
| Delete Super Admin Account | Protected | Protected | Blocked |
| Clean Up Stale Sessions & Logs | Authorized | Authorized | Blocked |
The FlowForge interface is organized into modular sections, each catering to specific operational workflows and infrastructure management tasks.
Quick status indicators, metrics cards, and real-time execution streams for global infrastructure oversight.
Central repository listing all available automations with pre-flight compiler validation and trigger controls.
Auto
(end-to-end), Manual (step gates), recurring Cron schedules.Admin-only DAG canvas powered by React Flow and Dagre layouts to construct step topologies visually.
Intelligent automation drafting powered by ultra-fast Groq LLM integration (Admin Only).
Register and maintain SSH target hosts with encrypted credential vaults and automatic OpenSSH enablement.
.pem/.key private keys encrypted at rest..ps1 for Windows VMs.Secure web-based terminal client powered by xterm.js for direct command-line operations (Admin Only).
nano, vim, htop) run without timeouts.Real-time telemetry, WebSocket streaming, and interactive step attachment for active automation runs.
Immutable compliance ledger tracking system-wide user activities and security modifications.
Centralized identity provisioning and workflow assignment mapping for IT administrators.
Behind the visual interface, FlowForge operates on specialized execution modules to orchestrate commands reliably and securely across distributed environments.
Executes the target script directly on the remote host, streaming logs in real-time via WebSockets, and terminates cleanly when the process returns an exit code. Ideal for fast configuration scripts and health checks.
Runs long-running tasks inside a detached background environment (e.g., Linux screen
utility). Execution continues uninterrupted even if the browser is closed or connection drops. The engine
polls for validation status at set intervals.
Opens standard streams for bidirectional user input/output to handle prompts. Observes a critical
5-second silence stabilization delay to allow slow remote shell profiles (like
.bashrc) to initialize without dropping command outputs.
The system intercepts login requests and issues secure bind queries to your AD / LDAP domain controllers
using the User Principal Name (UPN) format: username@letshego.com. If AD verification passes,
it cross-references the local database profile. If the profile exists, login succeeds instantly; if not,
an admin must first provision a local record to enforce authorization boundaries.
Administrators can execute local CLI maintenance scripts on the FlowForge host environment for emergency recovery, user creation, domain testing, and automated database backups.
Creates a new user profile manually with a temporary password (enforces password change on first login).
npx tsx create-user.ts <username> <password> <role> <email>
Resets the emergency user sysadmin back to password
sysadmin and grants full admin permissions.
node reset-admin.js
Tests connectivity to the LDAP / Active Directory domain controller and reports account lockout or disabled status.
node check-ad-user.js
Configured inside the platform as a scheduled recurring cron workflow that dumps the PostgreSQL database
into compressed archives. Weekly backup archives are stored on the target host (e.g.,
week24.sql.gz) and can be securely retrieved via SFTP by standard operators.
docker exec -t flowforge-db pg_dump -U flowforge flowforge | gzip > /backup/week$(date +%V).sql.gz
/backup/*.sql.gz