Cecsy
You hand it a compose file and it runs your project on your own server. It keeps two slots side by side, so undoing a bad release is a routing change rather than a rebuild. There is an MCP server in it as well, so an agent can deploy and read the logs without leaving the conversation.