DeployCLI Reference
CLI Overview & Conventions
Architecture, global options, session authentication, and command index for Explita Deploy (eda)
Deploy CLI Reference (eda)
eda (aliased as explita deploy) is the command-line interface for the Explita Deploy platform. It automates container packaging, remote building, health checks, zero-downtime routing swaps, isolated preview tunnels, and database cloning.
eda [command] [subcommand] [options]
explita deploy [command] [subcommand] [options]1. Global Flags & Options
These options can be appended to almost any eda command:
| Flag | Shorthand | Description |
|---|---|---|
--app <appId> | -a | Target application ID (defaults to appId in explita.json). |
--pass <pin> | Session-only passcode / PIN for server authentication (never saved to disk). | |
--help | -h | Display usage instructions and available subcommands. |
--version | -v | Show installed CLI version and remote server compatibility. |
2. Zero-Disk Passcode Security Model
When a host server has DEPLOY_PASSCODE configured in /opt/explita/deploy/.env, operations require secondary PIN authorization.
Key Security Guarantees:
- Never saved to disk: Passcodes are strictly forbidden from being written to
explita.jsonor~/.explita/config.json. - Known only to you: If a workstation is compromised or a developer config file is leaked, the attacker cannot run administrative commands without the operator's PIN.
- Interactive Stdin Prompt: In interactive terminal sessions,
edaautomatically prompts:🔑 Enter deploy passcode / PIN: - Inline Session-Only Flag: In non-interactive CI/CD pipelines or scripts, supply the passcode strictly in memory for that single invocation:
eda promote d79 --pass secret-pin-9876
3. Command Index & Sub-Pages
Explore the dedicated documentation for each command and its subcommands:
| Command | Subcommands / Capabilities | Documentation |
|---|---|---|
eda | Source packaging, remote builds, previews, health checks, zero-downtime swaps | Deploy Command |
eda init | Interactive configuration scaffolding and automatic port detection | Init Command |
eda ls, info, set, rm | Application inventory, resource quotas (CPU/Memory), deletion | App Management |
eda domain | ls, add, rm, check (automated Let's Encrypt TLS) | Domains Reference |
eda tunnel | enable, disable (automated public HTTPS edge tunnels) | Tunnel Command |
eda env | ls, set, rm, pull, diff (AES-256 encrypted variables) | Environment Variables |
eda start, stop, restart | Process & container lifecycle controls | Lifecycle Controls |
eda logs, stats, top | Real-time log streaming (--live), terminal CPU/Memory monitor | Observability |
eda sh, eda exec | Interactive container TTY shells and one-off zero-SSH execution | Remote Execution |
eda promote, rollback, cancel | Preview promotion, version rollbacks, in-flight abort, history | Releases & Rollbacks |
eda db | create, url, dump, restore, seed, backup, rm (PostgreSQL & MySQL) | Databases Reference |
eda redis | create, url, rm (Managed Redis caching & database indexes) | Redis Reference |
eda cron | ls, run, pause, resume, history (In-container scheduled background jobs) | Cron Jobs |
eda volume | ls, inspect, rm (Persistent Docker volumes & storage mounts) | Volumes Reference |
eda dump, s3 | eda dump archives, schedule crons, and offsite Cloudflare R2 / AWS S3 sync | Dumps & S3 Sync |
eda notify | ls, set, rm, test (Incident alerts for Discord, Slack, and Telegram) | Incident Alerts |
eda prune | VPS disk hygiene, BuildKit cache cleanup, and Docker maintenance | Disk Prune |
eda maintenance | on, off, status (Zero-downtime 503 maintenance mode with custom templates) | Maintenance Mode |
eda doctor | Pre-flight diagnostics across API, Docker engine, Caddy, disk, and config | Doctor Diagnostics |
eda config | ls, get, set, path (Client server URL, token, ports) | Client Configuration |