Documentation
Operate and connect
Connect agents and remote targets without weakening Pandrator’s application and Manager trust boundaries.
- New users
- Operators
Normal automation goes through the authenticated Pandrator application. Pandrator Manager remains responsible for installation and host-level lifecycle. Direct recovery is an optional, narrower path for app-down diagnosis and reviewed repair.
Safe defaults
- Keep local services on loopback unless another device genuinely needs access.
- Prefer HTTPS, exact origins, identity pinning, and least-privilege scopes.
- Keep application and Manager credentials separate.
- Review immutable plans before host changes.
- Persist both application workspace and Manager state in server or container deployments.