Servers, Domains & Certificates
Demerzel keeps a live inventory of what you run, assembled automatically from what the agent observes. You never maintain it by hand.
Servers
Infrastructure lists every server with its Health Score, OS, and when it was last observed, sectioned by group. Open one and its page is split into tabs:
| Tab | What it shows |
|---|---|
| Overview | System facts, hardware and storage, software and updates, services, recent activity, silence alert settings, group, and the public page |
| Monitoring | Metrics over time |
| Domains | The domains it serves |
| Vulnerabilities | Its findings, most severe first — see Vulnerability tracking |
| Packages | Installed packages and pending updates |
| Services | Running and failed services, and why each failed one stopped |
| Firewall | Listening ports and whether each is exposed, the firewall and its default policy, fail2ban jails |
| Security | The security checklist, incidents, detections and blocking — see Security incidents & IP dossier |
| Activity | What happened to this server: renames, notes, reboots, package upgrades, uptime milestones |
| Notes | Dated notes left by your team, with their author |
| Data feed | The latest messages the agent sent, payload included |
Organize a server
- Rename it (the pencil next to its name) to show a name of your choosing instead of the hostname; the hostname stays searchable.
- Group it — pick a group or type a new one. Infrastructure lists servers by group.
- Silence alerts: give a host its own delay before an agent-silent alert, or mute it entirely.
- Share it on an anonymised public page with a badge.
- Add a note for the next person, in the Notes tab.
Renaming, grouping, silencing and sharing are for owners and admins; any member who is not read-only can add a note. Each is recorded in the activity log.
Find anything
Press ⌘K (Ctrl K) or use Search in the sidebar to jump to a server (by name, hostname, IP or group), a domain or an agent.
Domains
Domains is an operational view of every domain served across your fleet — read from the Apache / Nginx virtual hosts the agent finds. It is not a DNS manager. Each domain shows its server, whether TLS is enabled, and its source.
Certificates
Certificates lists every TLS certificate observed across the fleet, sorted by soonest expiry, with days remaining. A certificate nearing expiry becomes an Action on the dashboard well before it lapses.
A failing renewal is named, not just counted. certbot’s renewal timer fails as soon as one of its certificates fails to renew, while all the others renew fine — so a restart never fixes it. The usual cause is a certificate left behind for a site that moved or closed: its name no longer resolves, its challenge fails on every run. When the renewal unit fails, the agent (v0.26+) lists the certificates certbot is configured to renew and checks each name with the host’s own resolver, and the Action says which one is dead and how to remove it — for example sudo certbot delete --cert-name old.example.com. It is a warning: the certificates your visitors actually get are covered by the expiry Action, which turns critical on the day.