Skip to content

Procella Documentation

A self-hosted Pulumi backend. Full CLI compatibility, multi-tenant auth, and horizontal scaling — on your infrastructure.

Full CLI Compatibility

pulumi login, pulumi up, pulumi stack export — every Pulumi CLI command works against Procella without modification.

Multi-Tenant Auth

Dev mode with static tokens for local development. Descope access keys with tenant RBAC for production multi-tenancy.

Horizontal Scaling

Stateless Bun server behind Caddy. All shared state in PostgreSQL. S3-compatible blob storage. Deploy N replicas with zero coordination.

Encryption at Rest

AES-256-GCM with HKDF per-stack key derivation. Secrets are encrypted before they reach storage.