shunx/graw repository overview

⁠Graw

Graw is an open-source, self-hosted server management panel with a desktop-like UI — real-time monitoring, Docker & App Store, websites, databases, web terminal and multi-node management in one panel. Built with Vue 3 + FastAPI.

⁠Important: run Graw in "full host mode"

Graw manages the host machine: Docker containers/images, App Store installations, the web terminal, processes/firewall rules and website configuration all act on the host. A plain -p 8000:8000 container will not work. The container needs:

• the host Docker socket (/var/run/docker.sock)
• the host root directory mounted at /host
• host-level privileges (--privileged + --pid host)

⁠Quick start

Option 1 — Host network (recommended, listens on host port 8000):

docker run -d --name graw-panel \
  --network host --pid host --privileged \
  -v /opt/graw/data:/app/backend/data \
  -v /:/host:rslave \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -e HOST_ROOT=/host \
  -e GRAW_HOST_DATA=/opt/graw/data \
  -e TZ=Asia/Shanghai \
  shunx/graw:latest

Then open http://<server-ip>:8000.

Option 2 — Bridge network (custom port, e.g. 8041):

docker run -d --name graw-panel \
  -p 8041:8000 --pid host --privileged \
  -v /opt/graw/data:/app/backend/data \
  -v /:/host:rslave \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -e HOST_ROOT=/host \
  -e GRAW_HOST_DATA=/opt/graw/data \
  -e TZ=Asia/Shanghai \
  shunx/graw:latest

Then open http://<server-ip>:8041.

⁠First login

Forgot the password? Reset it offline from inside the container:

docker exec -it graw-panel python reset_password.py admin

⁠Volumes & ports

⁠Environment variables

⁠Image tags & architectures

Supported architectures: linux/amd64, linux/arm64.

⁠Features

• Dual interface modes — desktop-like mode (windows / taskbar / desktop shortcuts) and a classic sidebar-style standard panel mode, switchable in Settings
• Real-time system monitoring — CPU, memory, disk, network and load, pushed over WebSocket with live charts
• Docker management & App Store — containers, images, volumes, logs, stats; one-click app installs from YAML recipes (docker compose)
• Website management — Nginx / OpenResty / Apache virtual hosts, WAF, rewrite rules, site analytics; auto-discovers existing OpenResty sites
• Databases — MySQL / MariaDB / Redis / PostgreSQL / MongoDB connections, browsing, SQL & Redis commands, slow query analysis
• File manager & recycle bin — upload/download, permissions, compress/extract, drag-and-drop folder upload; deleted files go to a recycle bin
• Web terminal — in-browser terminal (xterm.js) to operate the server directly
• Scheduled tasks / firewall / SSL — cron jobs, port & IP allow/deny lists (incl. Docker published ports), certificate upload and Let's Encrypt
• Multi-node management — manage other hosts as child nodes through an Agent tunnel with paired access keys
• Security & ops — tamper protection, health checks, panel backup, service monitoring, certificate expiry detection, notification center

⁠Links

• GitHub: github.com/wuhulab/Graw⁠
• Website: graw.shunx.top⁠
• Documentation: docs/⁠
• Issues & feedback: github.com/wuhulab/Graw/issues⁠
• Changelog: CHANGELOG.md⁠

⁠License

Released under AGPLv3⁠.