Initial commit

2026-02-04 00:17:30 +00:00
commit 890e52af8c
127 changed files with 9682 additions and 0 deletions
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -0,0 +1,28 @@
+FROM golang:1.23-bullseye
+
+# Install dependencies required for Nixpacks and Git interactions
+RUN apt-get update && apt-get install -y \
+    git \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Install Nixpacks
+RUN curl -sSL https://nixpacks.com/install.sh | bash
+
+WORKDIR /app
+
+# Cache Go modules
+COPY go.mod go.sum ./
+RUN go mod download
+
+# Copy source code
+COPY . .
+
+# Build the binary
+RUN CGO_ENABLED=0 GOOS=linux go build -o server ./cmd/server
+
+# Expose API port
+EXPOSE 8080
+
+# Run the server
+CMD ["./server"]
--- a/backend/README.md
+++ b/backend/README.md
@@ -0,0 +1,28 @@
+# Clickploy Backend
+
+The backend control plane for Clickploy, written in Go.
+
+## Overview
+This service handles:
+- **Project Management**: Creating and listing projects.
+- **Port Assignment**: Allocating ports (4000-5000) for deployments.
+- **Builds**: Using `nixpacks` to build Docker images from Git URLs.
+- **Deployment**: interfacing with the Docker daemon to run containers.
+- **Logs**: Streaming build and runtime logs via WebSockets.
+- **Webhooks**: Handling Git push events.
+
+
+
+### API Endpoints
+- `GET /api/projects`: List projects
+- `POST /api/projects`: Create a project
+- `GET /api/activity`: Get recent activity
+- `WS /api/deployments/:id/logs/stream`: Stream logs
+
+## Structure
+- `cmd/server/`: Entry point.
+- `internal/api/`: Gin HTTP handlers.
+- `internal/db/`: SQLite database setup.
+- `internal/models/`: GORM models.
+- `internal/builder/`: Nixpacks wrapper.
+- `internal/deployer/`: Docker SDK wrapper.
--- a/backend/cmd/server/main.go
+++ b/backend/cmd/server/main.go
@@ -0,0 +1,51 @@
+package main
+
+import (
+	"log"
+	"time"
+
+	"github.com/gin-contrib/cors"
+	"github.com/gin-gonic/gin"
+
+	"clickploy/internal/api"
+	"clickploy/internal/builder"
+	"clickploy/internal/db"
+	"clickploy/internal/deployer"
+	"clickploy/internal/ports"
+)
+
+func main() {
+	db.Init(".")
+	pm := ports.NewManager(4000, 5000)
+	buildr := builder.NewBuilder()
+	dply, err := deployer.NewDeployer()
+	if err != nil {
+		log.Fatalf("Failed to create deployer: %v", err)
+	}
+
+	handler := api.NewHandler(buildr, dply, pm)
+
+	r := gin.Default()
+
+	r.Use(cors.New(cors.Config{
+		AllowOrigins:     []string{"*"},
+		AllowMethods:     []string{"GET", "POST", "PUT", "DELETE", "OPTIONS"},
+		AllowHeaders:     []string{"Origin", "Content-Type", "Authorization"},
+		ExposeHeaders:    []string{"Content-Length"},
+		AllowCredentials: true,
+		MaxAge:           12 * time.Hour,
+	}))
+
+	handler.RegisterRoutes(r)
+	handler.RegisterAuthRoutes(r)
+	handler.RegisterUserRoutes(r)
+	handler.RegisterProjectRoutes(r)
+	handler.RegisterWebhookRoutes(r)
+	handler.RegisterSystemRoutes(r)
+	handler.RegisterStorageRoutes(r)
+
+	log.Println("Starting Clickploy Backend on :8080")
+	if err := r.Run(":8080"); err != nil {
+		log.Fatalf("Server failed: %v", err)
+	}
+}
--- a/backend/go.mod
+++ b/backend/go.mod
@@ -0,0 +1,66 @@
+module clickploy
+
+go 1.24.0
+
+toolchain go1.24.12
+
+require (
+	github.com/docker/docker v24.0.7+incompatible
+	github.com/docker/go-connections v0.6.0
+	github.com/gin-contrib/cors v1.5.0
+	github.com/gin-gonic/gin v1.9.1
+	github.com/golang-jwt/jwt/v5 v5.3.1
+	golang.org/x/crypto v0.47.0
+	gorm.io/driver/sqlite v1.6.0
+	gorm.io/gorm v1.31.1
+)
+
+require (
+	github.com/Microsoft/go-winio v0.4.21 // indirect
+	github.com/bytedance/sonic v1.10.1 // indirect
+	github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect
+	github.com/chenzhuoyu/iasm v0.9.0 // indirect
+	github.com/distribution/reference v0.0.0-00010101000000-000000000000 // indirect
+	github.com/docker/distribution v2.8.3+incompatible // indirect
+	github.com/docker/go-units v0.5.0 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.2 // indirect
+	github.com/gin-contrib/sse v0.1.0 // indirect
+	github.com/go-playground/locales v0.14.1 // indirect
+	github.com/go-playground/universal-translator v0.18.1 // indirect
+	github.com/go-playground/validator/v10 v10.15.5 // indirect
+	github.com/goccy/go-json v0.10.2 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/google/go-cmp v0.5.9 // indirect
+	github.com/gorilla/websocket v1.5.3 // indirect
+	github.com/jinzhu/inflection v1.0.0 // indirect
+	github.com/jinzhu/now v1.1.5 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
+	github.com/kr/text v0.2.0 // indirect
+	github.com/leodido/go-urn v1.2.4 // indirect
+	github.com/mattn/go-isatty v0.0.19 // indirect
+	github.com/mattn/go-sqlite3 v1.14.22 // indirect
+	github.com/moby/term v0.5.2 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/morikuni/aec v1.1.0 // indirect
+	github.com/opencontainers/go-digest v1.0.0 // indirect
+	github.com/opencontainers/image-spec v1.1.1 // indirect
+	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
+	github.com/pkg/errors v0.9.1 // indirect
+	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
+	github.com/ugorji/go/codec v1.2.11 // indirect
+	golang.org/x/arch v0.5.0 // indirect
+	golang.org/x/net v0.48.0 // indirect
+	golang.org/x/sys v0.40.0 // indirect
+	golang.org/x/text v0.33.0 // indirect
+	golang.org/x/time v0.14.0 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	gotest.tools/v3 v3.5.2 // indirect
+)
+
+replace (
+	github.com/distribution/reference => github.com/distribution/reference v0.5.0
+	github.com/docker/docker => github.com/docker/docker v24.0.7+incompatible
+)
--- a/backend/go.sum
+++ b/backend/go.sum
@@ -0,0 +1,178 @@
+github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c h1:udKWzYgxTojEKWjV8V+WSxDXJ4NFATAsZjh8iIbsQIg=
+github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c/go.mod h1:xomTg63KZ2rFqZQzSB4Vz2SUXa1BpHTVz9L5PTmPC4E=
+github.com/Microsoft/go-winio v0.4.21 h1:+6mVbXh4wPzUrl1COX9A+ZCvEpYsOBZ6/+kwDnvLyro=
+github.com/Microsoft/go-winio v0.4.21/go.mod h1:JPGBdM1cNvN/6ISo+n8V5iA4v8pBzdOpzfwIujj1a84=
+github.com/bytedance/sonic v1.5.0/go.mod h1:ED5hyg4y6t3/9Ku1R6dU/4KyJ48DZ4jPhfY1O2AihPM=
+github.com/bytedance/sonic v1.10.0-rc/go.mod h1:ElCzW+ufi8qKqNW0FY314xriJhyJhuoJ3gFZdAHF7NM=
+github.com/bytedance/sonic v1.10.1 h1:7a1wuFXL1cMy7a3f7/VFcEtriuXQnUBhtoVfOZiaysc=
+github.com/bytedance/sonic v1.10.1/go.mod h1:iZcSUejdk5aukTND/Eu/ivjQuEL0Cu9/rf50Hi0u/g4=
+github.com/chenzhuoyu/base64x v0.0.0-20211019084208-fb5309c8db06/go.mod h1:DH46F32mSOjUmXrMHnKwZdA8wcEefY7UVqBKYGjpdQY=
+github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311/go.mod h1:b583jCggY9gE99b6G5LEC39OIiVsWj+R97kbl5odCEk=
+github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d h1:77cEq6EriyTZ0g/qfRdp61a3Uu/AWrgIq2s0ClJV1g0=
+github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d/go.mod h1:8EPpVsBuRksnlj1mLy4AWzRNQYxauNi62uWcE3to6eA=
+github.com/chenzhuoyu/iasm v0.9.0 h1:9fhXjVzq5hUy2gkhhgHl95zG2cEAhw9OSGs8toWWAwo=
+github.com/chenzhuoyu/iasm v0.9.0/go.mod h1:Xjy2NpN3h7aUqeqM+woSuuvxmIe6+DDsiNLIrkAmYog=
+github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/distribution/reference v0.5.0 h1:/FUIFXtfc/x2gpa5/VGfiGLuOIdYa1t65IKK2OFGvA0=
+github.com/distribution/reference v0.5.0/go.mod h1:BbU0aIcezP1/5jX/8MP0YiH4SdvB5Y4f/wlDRiLyi3E=
+github.com/docker/distribution v2.8.3+incompatible h1:AtKxIZ36LoNK51+Z6RpzLpddBirtxJnzDrHLEKxTAYk=
+github.com/docker/distribution v2.8.3+incompatible/go.mod h1:J2gT2udsDAN96Uj4KfcMRqY0/ypR+oyYUYmja8H+y+w=
+github.com/docker/docker v24.0.7+incompatible h1:Wo6l37AuwP3JaMnZa226lzVXGA3F9Ig1seQen0cKYlM=
+github.com/docker/docker v24.0.7+incompatible/go.mod h1:eEKB0N0r5NX/I1kEveEz05bcu8tLC/8azJZsviup8Sk=
+github.com/docker/go-connections v0.6.0 h1:LlMG9azAe1TqfR7sO+NJttz1gy6KO7VJBh+pMmjSD94=
+github.com/docker/go-connections v0.6.0/go.mod h1:AahvXYshr6JgfUJGdDCs2b5EZG/vmaMAntpSFH5BFKE=
+github.com/docker/go-units v0.5.0 h1:69rxXcBk27SvSaaxTtLh/8llcHD8vYHT7WSdRZ/jvr4=
+github.com/docker/go-units v0.5.0/go.mod h1:fgPhTUdO+D/Jk86RDLlptpiXQzgHJF7gydDDbaIK4Dk=
+github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU=
+github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA=
+github.com/gin-contrib/cors v1.5.0 h1:DgGKV7DDoOn36DFkNtbHrjoRiT5ExCe+PC9/xp7aKvk=
+github.com/gin-contrib/cors v1.5.0/go.mod h1:TvU7MAZ3EwrPLI2ztzTt3tqgvBCq+wn8WpZmfADjupI=
+github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
+github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
+github.com/gin-gonic/gin v1.9.1 h1:4idEAncQnU5cB7BeOkPtxjfCSye0AAm1R0RVIqJ+Jmg=
+github.com/gin-gonic/gin v1.9.1/go.mod h1:hPrL7YrpYKXt5YId3A/Tnip5kqbEAP+KLuI3SUcPTeU=
+github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
+github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4=
+github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
+github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
+github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
+github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
+github.com/go-playground/validator/v10 v10.15.5 h1:LEBecTWb/1j5TNY1YYG2RcOUN3R7NLylN+x8TTueE24=
+github.com/go-playground/validator/v10 v10.15.5/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU=
+github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
+github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/golang-jwt/jwt/v5 v5.3.1 h1:kYf81DTWFe7t+1VvL7eS+jKFVWaUnK9cB1qbwn63YCY=
+github.com/golang-jwt/jwt/v5 v5.3.1/go.mod h1:fxCRLWMO43lRc8nhHWY6LGqRcf+1gQWArsqaEUEa5bE=
+github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk=
+github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/gorilla/websocket v1.5.3 h1:saDtZ6Pbx/0u+bgYQ3q96pZgCzfhKXGPqt7kZ72aNNg=
+github.com/gorilla/websocket v1.5.3/go.mod h1:YR8l580nyteQvAITg2hZ9XVh4b55+EU/adAjf1fMHhE=
+github.com/jinzhu/inflection v1.0.0 h1:K317FqzuhWc8YvSVlFMCCUb36O/S9MCKRDI7QkRKD/E=
+github.com/jinzhu/inflection v1.0.0/go.mod h1:h+uFLlag+Qp1Va5pdKtLDYj+kHp5pxUVkryuEj+Srlc=
+github.com/jinzhu/now v1.1.5 h1:/o9tlHleP7gOFmsnYNz3RGnqzefHA47wQpKrrdTIwXQ=
+github.com/jinzhu/now v1.1.5/go.mod h1:d3SSVoowX0Lcu0IBviAWJpolVfI5UJVZZ7cO71lE/z8=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
+github.com/klauspost/cpuid/v2 v2.2.5 h1:0E5MSMDEoAulmXNFquVs//DdoomxaoTY1kUhbc/qbZg=
+github.com/klauspost/cpuid/v2 v2.2.5/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
+github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
+github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
+github.com/kr/pretty v0.3.0/go.mod h1:640gp4NfQd8pI5XOwp5fnNeVWj67G7CFk/SaSQn7NBk=
+github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
+github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
+github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q=
+github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4=
+github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA=
+github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
+github.com/mattn/go-sqlite3 v1.14.22 h1:2gZY6PC6kBnID23Tichd1K+Z0oS6nE/XwU+Vz/5o4kU=
+github.com/mattn/go-sqlite3 v1.14.22/go.mod h1:Uh1q+B4BYcTPb+yiD3kU8Ct7aC0hY9fxUwlHK0RXw+Y=
+github.com/moby/term v0.5.2 h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ=
+github.com/moby/term v0.5.2/go.mod h1:d3djjFCrjnB+fl8NJux+EJzu0msscUP+f8it8hPkFLc=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/morikuni/aec v1.1.0 h1:vBBl0pUnvi/Je71dsRrhMBtreIqNMYErSAbEeb8jrXQ=
+github.com/morikuni/aec v1.1.0/go.mod h1:xDRgiq/iw5l+zkao76YTKzKttOp2cwPEne25HDkJnBw=
+github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U=
+github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM=
+github.com/opencontainers/image-spec v1.1.1 h1:y0fUlFfIZhPF1W537XOLg0/fcx6zcHCJwooC2xJA040=
+github.com/opencontainers/image-spec v1.1.1/go.mod h1:qpqAh3Dmcf36wStyyWU+kCeDgrGnAve2nCC8+7h8Q0M=
+github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4=
+github.com/pelletier/go-toml/v2 v2.1.0/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/rogpeppe/go-internal v1.8.0 h1:FCbCCtXNOY3UtUuHUYaghJg4y7Fd14rXifAYUAtL9R8=
+github.com/rogpeppe/go-internal v1.8.0/go.mod h1:WmiCO8CzOY8rg0OYDC4/i/2WRWAB6poM+XZ2dLUbcbE=
+github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
+github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
+github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
+github.com/ugorji/go/codec v1.2.11 h1:BMaWp1Bb6fHwEtbplGBGJ498wD+LKlNSl25MjdZY4dU=
+github.com/ugorji/go/codec v1.2.11/go.mod h1:UNopzCgEMSXjBc6AOMqYvWC1ktqTAfzJZUZgYf6w6lg=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
+golang.org/x/arch v0.5.0 h1:jpGode6huXQxcskEIpOCvrU+tzo81b6+oFLUYXWtH/Y=
+golang.org/x/arch v0.5.0/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
+golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.48.0 h1:zyQRTTrjc33Lhh0fBgT/H3oZq9WuvRR5gPC70xpDiQU=
+golang.org/x/net v0.48.0/go.mod h1:+ndRgGjkh8FGtu1w1FGbEC31if4VrNVMuKTgcAAnQRY=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210124154548-22da62e12c0c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
+golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.33.0 h1:B3njUFyqtHDUI5jMn1YIr5B0IE2U0qck04r6d4KPAxE=
+golang.org/x/text v0.33.0/go.mod h1:LuMebE6+rBincTi9+xWTY8TztLzKHc/9C1uBCG27+q8=
+golang.org/x/time v0.14.0 h1:MRx4UaLrDotUKUdCIqzPC48t1Y9hANFKIRpNx+Te8PI=
+golang.org/x/time v0.14.0/go.mod h1:eL/Oa2bBBK0TkX57Fyni+NgnyQQN4LitPmob2Hjnqw4=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw=
+google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
+google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
+gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gorm.io/driver/sqlite v1.6.0 h1:WHRRrIiulaPiPFmDcod6prc4l2VGVWHz80KspNsxSfQ=
+gorm.io/driver/sqlite v1.6.0/go.mod h1:AO9V1qIQddBESngQUKWL9yoH93HIeA1X6V633rBwyT8=
+gorm.io/gorm v1.31.1 h1:7CA8FTFz/gRfgqgpeKIBcervUn3xSyPUmr6B2WXJ7kg=
+gorm.io/gorm v1.31.1/go.mod h1:XyQVbO2k6YkOis7C2437jSit3SsDK72s7n7rsSHd+Gs=
+gotest.tools/v3 v3.5.2 h1:7koQfIKdy+I8UTetycgUqXWSDwpgv193Ka+qRsmBY8Q=
+gotest.tools/v3 v3.5.2/go.mod h1:LtdLGcnqToBH83WByAAi/wiwSFCArdFIUV/xxN4pcjA=
+nullprogram.com/x/optparse v1.0.0/go.mod h1:KdyPE+Igbe0jQUrVfMqDMeJQIJZEuyV7pjYmp6pbG50=
+rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
--- a/backend/internal/api/api.go
+++ b/backend/internal/api/api.go
@@ -0,0 +1,92 @@
+package api
+
+import (
+	"fmt"
+	"net/http"
+	"os"
+
+	"github.com/gin-gonic/gin"
+
+	"clickploy/internal/builder"
+	"clickploy/internal/deployer"
+	"clickploy/internal/ports"
+)
+
+type Handler struct {
+	builder  *builder.Builder
+	deployer *deployer.Deployer
+	ports    *ports.Manager
+}
+
+func NewHandler(b *builder.Builder, d *deployer.Deployer, p *ports.Manager) *Handler {
+	return &Handler{
+		builder:  b,
+		deployer: d,
+		ports:    p,
+	}
+}
+
+type DeployRequest struct {
+	Repo     string `json:"repo" binding:"required"`
+	Name     string `json:"name" binding:"required"`
+	Port     int    `json:"port"`
+	GitToken string `json:"git_token"`
+}
+
+type DeployResponse struct {
+	Status  string `json:"status"`
+	AppName string `json:"app_name"`
+	Port    int    `json:"port"`
+	URL     string `json:"url"`
+	Message string `json:"message"`
+}
+
+func (h *Handler) RegisterRoutes(r *gin.Engine) {
+	r.POST("/deploy", h.handleDeploy)
+	h.RegisterStreamRoutes(r)
+}
+
+func (h *Handler) handleDeploy(c *gin.Context) {
+	var req DeployRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	imageName, err := h.builder.Build(req.Repo, req.Name, req.GitToken, "", "", "", "", nil, os.Stdout)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": fmt.Sprintf("Build failed: %v", err)})
+		return
+	}
+
+	port, err := h.ports.GetPort(req.Name, req.Port)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": fmt.Sprintf("Port allocation failed: %v", err)})
+		return
+	}
+
+	_, err = h.deployer.RunContainer(c.Request.Context(), imageName, req.Name, port, nil)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": fmt.Sprintf("Deployment failed: %v", err)})
+		return
+	}
+
+	c.JSON(http.StatusOK, DeployResponse{
+		Status:  "success",
+		AppName: req.Name,
+		Port:    port,
+		URL:     fmt.Sprintf("http://localhost:%d", port),
+		Message: "Container started successfully",
+	})
+}
+
+func (h *Handler) RegisterSystemRoutes(r *gin.Engine) {
+	r.GET("/api/system/status", h.handleSystemStatus)
+}
+
+func (h *Handler) handleSystemStatus(c *gin.Context) {
+	c.JSON(http.StatusOK, gin.H{
+		"version": "v0.1.0",
+		"status":  "All systems normal",
+	})
+}
--- a/backend/internal/api/auth.go
+++ b/backend/internal/api/auth.go
@@ -0,0 +1,147 @@
+package api
+
+import (
+	"net/http"
+
+	"clickploy/internal/auth"
+	"clickploy/internal/db"
+	"clickploy/internal/models"
+
+	"github.com/gin-gonic/gin"
+)
+
+type AuthRequest struct {
+	Email    string `json:"email" binding:"required,email"`
+	Password string `json:"password" binding:"required,min=6"`
+	Name     string `json:"name"`
+}
+
+type AuthResponse struct {
+	Token string      `json:"token"`
+	User  models.User `json:"user"`
+}
+
+func (h *Handler) RegisterAuthRoutes(r *gin.Engine) {
+	authGroup := r.Group("/auth")
+	{
+		authGroup.POST("/register", h.register)
+		authGroup.POST("/login", h.login)
+	}
+}
+
+func (h *Handler) register(c *gin.Context) {
+	var req AuthRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	hashed, err := auth.HashPassword(req.Password)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to hash password"})
+		return
+	}
+
+	user := models.User{
+		Email:    req.Email,
+		Password: hashed,
+		Name:     req.Name,
+		Avatar:   "https://github.com/shadcn.png",
+	}
+
+	if result := db.DB.Create(&user); result.Error != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Email already exists"})
+		return
+	}
+
+	token, _ := auth.GenerateToken(user.ID, user.Email)
+	c.JSON(http.StatusCreated, AuthResponse{Token: token, User: user})
+}
+
+func (h *Handler) login(c *gin.Context) {
+	var req AuthRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	var user models.User
+	if result := db.DB.Where("email = ?", req.Email).First(&user); result.Error != nil {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid credentials"})
+		return
+	}
+
+	if !auth.CheckPassword(req.Password, user.Password) {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid credentials"})
+		return
+	}
+
+	token, _ := auth.GenerateToken(user.ID, user.Email)
+	c.JSON(http.StatusOK, AuthResponse{Token: token, User: user})
+}
+
+func (h *Handler) RegisterUserRoutes(r *gin.Engine) {
+	userGroup := r.Group("/api/user", AuthMiddleware())
+	{
+		userGroup.PUT("/profile", h.updateProfile)
+		userGroup.PUT("/password", h.updatePassword)
+	}
+}
+
+func (h *Handler) updateProfile(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	var req struct {
+		Name  string `json:"name"`
+		Email string `json:"email"`
+	}
+
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	var user models.User
+	if result := db.DB.First(&user, userID); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "User not found"})
+		return
+	}
+
+	if req.Name != "" {
+		user.Name = req.Name
+	}
+	if req.Email != "" {
+		user.Email = req.Email
+	}
+
+	db.DB.Save(&user)
+	c.JSON(http.StatusOK, user)
+}
+
+func (h *Handler) updatePassword(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	var req struct {
+		OldPassword string `json:"old_password" binding:"required"`
+		NewPassword string `json:"new_password" binding:"required,min=6"`
+	}
+
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	var user models.User
+	if result := db.DB.First(&user, userID); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "User not found"})
+		return
+	}
+
+	if !auth.CheckPassword(req.OldPassword, user.Password) {
+		c.JSON(http.StatusUnauthorized, gin.H{"error": "Incorrect old password"})
+		return
+	}
+
+	hashed, _ := auth.HashPassword(req.NewPassword)
+	user.Password = hashed
+	db.DB.Save(&user)
+	c.JSON(http.StatusOK, gin.H{"message": "Password updated"})
+}
--- a/backend/internal/api/middleware.go
+++ b/backend/internal/api/middleware.go
@@ -0,0 +1,33 @@
+package api
+
+import (
+	"net/http"
+	"strings"
+
+	"clickploy/internal/auth"
+
+	"github.com/gin-gonic/gin"
+)
+
+func AuthMiddleware() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		authHeader := c.GetHeader("Authorization")
+		if authHeader == "" {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Authorization header required"})
+			c.Abort()
+			return
+		}
+
+		tokenString := strings.TrimPrefix(authHeader, "Bearer ")
+		claims, err := auth.ValidateToken(tokenString)
+		if err != nil {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Invalid token"})
+			c.Abort()
+			return
+		}
+
+		c.Set("userID", claims.UserID)
+		c.Set("email", claims.Email)
+		c.Next()
+	}
+}
--- a/backend/internal/api/project.go
+++ b/backend/internal/api/project.go
@@ -0,0 +1,283 @@
+package api
+
+import (
+	"bytes"
+	"fmt"
+	"io"
+	"net/http"
+	"strconv"
+	"time"
+
+	"clickploy/internal/auth"
+	"clickploy/internal/db"
+	"clickploy/internal/models"
+
+	"github.com/gin-gonic/gin"
+	"gorm.io/gorm"
+)
+
+func (h *Handler) RegisterProjectRoutes(r *gin.Engine) {
+	protected := r.Group("/api", AuthMiddleware())
+	{
+		protected.POST("/projects", h.createProject)
+		protected.GET("/projects", h.listProjects)
+		protected.GET("/projects/:id", h.getProject)
+		protected.PUT("/projects/:id/env", h.updateProjectEnv)
+		protected.POST("/projects/:id/redeploy", h.redeployProject)
+		protected.GET("/activity", h.getActivity)
+	}
+}
+
+func (h *Handler) updateProjectEnv(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	projectID := c.Param("id")
+
+	var req struct {
+		EnvVars map[string]string `json:"env_vars"`
+	}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	pid, err := strconv.ParseUint(projectID, 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid Project ID"})
+		return
+	}
+
+	var project models.Project
+	if result := db.DB.Where("id = ? AND owner_id = ?", pid, userID).First(&project); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "Project not found"})
+		return
+	}
+
+	tx := db.DB.Begin()
+	if err := tx.Where("project_id = ?", project.ID).Delete(&models.EnvVar{}).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to update env vars"})
+		return
+	}
+
+	for k, v := range req.EnvVars {
+		envVar := models.EnvVar{
+			ProjectID: project.ID,
+			Key:       k,
+			Value:     v,
+		}
+		if err := tx.Create(&envVar).Error; err != nil {
+			tx.Rollback()
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to save env var"})
+			return
+		}
+	}
+
+	tx.Commit()
+	c.JSON(http.StatusOK, gin.H{"status": "updated"})
+}
+
+func (h *Handler) redeployProject(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	projectID := c.Param("id")
+
+	pid, err := strconv.ParseUint(projectID, 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid Project ID"})
+		return
+	}
+
+	var project models.Project
+	if result := db.DB.Preload("EnvVars").Where("id = ? AND owner_id = ?", pid, userID).First(&project); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "Project not found"})
+		return
+	}
+
+	deployment := models.Deployment{
+		ProjectID: project.ID,
+		Status:    "building",
+		Commit:    "MANUAL",
+		Logs:      "Starting manual redeploy...",
+	}
+	db.DB.Create(&deployment)
+
+	go func() {
+		var logBuffer bytes.Buffer
+		streamer := &StreamWriter{DeploymentID: deployment.ID}
+		multi := io.MultiWriter(&logBuffer, streamer)
+
+		envMap := make(map[string]string)
+		for _, env := range project.EnvVars {
+			envMap[env.Key] = env.Value
+		}
+
+		imageName, err := h.builder.Build(project.RepoURL, project.Name, project.GitToken, project.BuildCommand, project.StartCommand, project.InstallCommand, project.Runtime, envMap, multi)
+		deployment.Logs = logBuffer.String()
+
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nBuild Error: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		var envStrings []string
+		for _, env := range project.EnvVars {
+			envStrings = append(envStrings, fmt.Sprintf("%s=%s", env.Key, env.Value))
+		}
+
+		containerID, err := h.deployer.RunContainer(c.Request.Context(), imageName, project.Name, project.Port, envStrings)
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nContainer Error: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		deployment.Status = "live"
+		deployment.URL = fmt.Sprintf("http://localhost:%d", project.Port)
+		deployment.Logs += fmt.Sprintf("\n\nContainer ID: %s", containerID)
+		db.DB.Save(&deployment)
+	}()
+
+	c.JSON(http.StatusOK, gin.H{"status": "redeployment_started", "deployment_id": deployment.ID})
+}
+
+func (h *Handler) getActivity(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	var deployments []models.Deployment
+
+	err := db.DB.Joins("JOIN projects ON projects.id = deployments.project_id").
+		Where("projects.owner_id = ?", userID).
+		Order("deployments.created_at desc").
+		Limit(20).
+		Preload("Project").
+		Find(&deployments).Error
+
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to fetch activity"})
+		return
+	}
+	c.JSON(http.StatusOK, deployments)
+}
+
+func (h *Handler) createProject(c *gin.Context) {
+	userID, _ := c.Get("userID")
+
+	var req struct {
+		DeployRequest
+		EnvVars        map[string]string `json:"env_vars"`
+		BuildCommand   string            `json:"build_command"`
+		StartCommand   string            `json:"start_command"`
+		InstallCommand string            `json:"install_command"`
+		Runtime        string            `json:"runtime"`
+	}
+
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	port, err := h.ports.GetPort(req.Name, req.Port)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": fmt.Sprintf("Port allocation failed: %v", err)})
+		return
+	}
+
+	var envVarsModel []models.EnvVar
+	var envStrings []string
+	for k, v := range req.EnvVars {
+		envStrings = append(envStrings, fmt.Sprintf("%s=%s", k, v))
+		envVarsModel = append(envVarsModel, models.EnvVar{Key: k, Value: v})
+	}
+
+	webhookSecret, _ := auth.HashPassword(fmt.Sprintf("%s-%d-%d", req.Name, userID, time.Now().UnixNano()))
+
+	project := models.Project{
+		Name:           req.Name,
+		RepoURL:        req.Repo,
+		OwnerID:        userID.(uint),
+		Port:           port,
+		WebhookSecret:  webhookSecret,
+		GitToken:       req.GitToken,
+		EnvVars:        envVarsModel,
+		BuildCommand:   req.BuildCommand,
+		StartCommand:   req.StartCommand,
+		InstallCommand: req.InstallCommand,
+		Runtime:        req.Runtime,
+	}
+
+	if result := db.DB.Create(&project); result.Error != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to save project to DB"})
+		return
+	}
+
+	deployment := models.Deployment{
+		ProjectID: project.ID,
+		Status:    "building",
+		Commit:    "HEAD",
+		Logs:      "Starting build...",
+	}
+	db.DB.Create(&deployment)
+
+	go func() {
+		var logBuffer bytes.Buffer
+		streamer := &StreamWriter{DeploymentID: deployment.ID}
+		multi := io.MultiWriter(&logBuffer, streamer)
+
+		imageName, err := h.builder.Build(req.Repo, req.Name, req.GitToken, req.BuildCommand, req.StartCommand, req.InstallCommand, req.Runtime, req.EnvVars, multi)
+		deployment.Logs = logBuffer.String()
+
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nBuild Error: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		containerID, err := h.deployer.RunContainer(c.Request.Context(), imageName, req.Name, port, envStrings)
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nContainer Error: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		deployment.Status = "live"
+		deployment.URL = fmt.Sprintf("http://localhost:%d", port)
+		deployment.Logs += fmt.Sprintf("\n\nContainer ID: %s", containerID)
+		db.DB.Save(&deployment)
+	}()
+
+	project.Deployments = []models.Deployment{deployment}
+	c.JSON(http.StatusOK, project)
+}
+
+func (h *Handler) listProjects(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	var projects []models.Project
+	if result := db.DB.Preload("Deployments").Where("owner_id = ?", userID).Find(&projects); result.Error != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to fetch projects"})
+		return
+	}
+	c.JSON(http.StatusOK, projects)
+}
+
+func (h *Handler) getProject(c *gin.Context) {
+	userID, _ := c.Get("userID")
+	projectID := c.Param("id")
+
+	pid, err := strconv.ParseUint(projectID, 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid Project ID"})
+		return
+	}
+
+	var project models.Project
+	if result := db.DB.Order("created_at desc").Preload("Deployments", func(db *gorm.DB) *gorm.DB {
+		return db.Order("deployments.created_at desc")
+	}).Preload("EnvVars").Where("id = ? AND owner_id = ?", pid, userID).First(&project); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "Project not found"})
+		return
+	}
+	c.JSON(http.StatusOK, project)
+}
--- a/backend/internal/api/storage.go
+++ b/backend/internal/api/storage.go
@@ -0,0 +1,98 @@
+package api
+
+import (
+	"fmt"
+	"net/http"
+	"os"
+	"path/filepath"
+	"syscall"
+
+	"clickploy/internal/db"
+	"clickploy/internal/models"
+
+	"github.com/gin-gonic/gin"
+)
+
+type CreateDatabaseRequest struct {
+	Name string `json:"name" binding:"required"`
+	Type string `json:"type" binding:"required,oneof=sqlite"`
+}
+
+type StorageStatsResponse struct {
+	TotalMB float64 `json:"total_mb"`
+	UsedMB  float64 `json:"used_mb"`
+}
+
+func (h *Handler) RegisterStorageRoutes(r *gin.Engine) {
+	api := r.Group("/api/storage")
+	api.Use(AuthMiddleware())
+	{
+		api.GET("/stats", h.handleGetStorageStats)
+		api.GET("/databases", h.handleListDatabases)
+		api.POST("/databases", h.handleCreateDatabase)
+	}
+}
+
+func (h *Handler) handleGetStorageStats(c *gin.Context) {
+	var stat syscall.Statfs_t
+	wd, _ := os.Getwd()
+
+	if err := syscall.Statfs(wd, &stat); err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to get disk stats"})
+		return
+	}
+
+	totalBytes := stat.Blocks * uint64(stat.Bsize)
+	availBytes := stat.Bavail * uint64(stat.Bsize)
+	usedBytes := totalBytes - availBytes
+
+	c.JSON(http.StatusOK, StorageStatsResponse{
+		TotalMB: float64(totalBytes) / 1024 / 1024,
+		UsedMB:  float64(usedBytes) / 1024 / 1024,
+	})
+}
+
+func (h *Handler) handleListDatabases(c *gin.Context) {
+	userId := c.GetUint("userID")
+	var dbs []models.Database
+	if err := db.DB.Where("owner_id = ?", userId).Find(&dbs).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to list databases"})
+		return
+	}
+	c.JSON(http.StatusOK, dbs)
+}
+
+func (h *Handler) handleCreateDatabase(c *gin.Context) {
+	userId := c.GetUint("userID")
+	var req CreateDatabaseRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+		return
+	}
+
+	newDB := models.Database{
+		Name:    req.Name,
+		Type:    req.Type,
+		Status:  "available",
+		OwnerID: userId,
+		SizeMB:  0,
+	}
+
+	dataDir := "./data/user_dbs"
+	os.MkdirAll(dataDir, 0755)
+
+	dbPath := filepath.Join(dataDir, fmt.Sprintf("%d_%s.db", userId, req.Name))
+	file, err := os.Create(dbPath)
+	if err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create database file"})
+		return
+	}
+	file.Close()
+
+	if err := db.DB.Create(&newDB).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to save database record"})
+		return
+	}
+
+	c.JSON(http.StatusOK, newDB)
+}
--- a/backend/internal/api/stream.go
+++ b/backend/internal/api/stream.go
@@ -0,0 +1,111 @@
+package api
+
+import (
+	"net/http"
+	"strconv"
+	"sync"
+	"time"
+
+	"github.com/gin-gonic/gin"
+	"github.com/gorilla/websocket"
+)
+
+var upgrader = websocket.Upgrader{
+	CheckOrigin: func(r *http.Request) bool { return true },
+}
+
+type LogHub struct {
+	mu      sync.Mutex
+	streams map[uint][]chan []byte
+}
+
+var Hub = &LogHub{
+	streams: make(map[uint][]chan []byte),
+}
+
+func (h *LogHub) Broadcast(deploymentID uint, p []byte) {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	if sinks, ok := h.streams[deploymentID]; ok {
+		for _, sink := range sinks {
+			select {
+			case sink <- p:
+			default:
+			}
+		}
+	}
+}
+
+func (h *LogHub) Subscribe(deploymentID uint) chan []byte {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	ch := make(chan []byte, 256)
+	h.streams[deploymentID] = append(h.streams[deploymentID], ch)
+	return ch
+}
+
+func (h *LogHub) Unsubscribe(deploymentID uint, ch chan []byte) {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	if sinks, ok := h.streams[deploymentID]; ok {
+		for i, sink := range sinks {
+			if sink == ch {
+				h.streams[deploymentID] = append(sinks[:i], sinks[i+1:]...)
+				close(ch)
+				break
+			}
+		}
+		if len(h.streams[deploymentID]) == 0 {
+			delete(h.streams, deploymentID)
+		}
+	}
+}
+
+type StreamWriter struct {
+	DeploymentID uint
+}
+
+func (w *StreamWriter) Write(p []byte) (n int, err error) {
+	c := make([]byte, len(p))
+	copy(c, p)
+	Hub.Broadcast(w.DeploymentID, c)
+	return len(p), nil
+}
+
+func (h *Handler) streamDeploymentLogs(c *gin.Context) {
+	deploymentIDStr := c.Param("id")
+	deploymentID, err := strconv.ParseUint(deploymentIDStr, 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid ID"})
+		return
+	}
+
+	conn, err := upgrader.Upgrade(c.Writer, c.Request, nil)
+	if err != nil {
+		return
+	}
+	defer conn.Close()
+
+	logChan := Hub.Subscribe(uint(deploymentID))
+	defer Hub.Unsubscribe(uint(deploymentID), logChan)
+
+	go func() {
+		for {
+			if _, _, err := conn.NextReader(); err != nil {
+				conn.Close()
+				return
+			}
+		}
+	}()
+
+	for logChunk := range logChan {
+		conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
+		if err := conn.WriteMessage(websocket.TextMessage, logChunk); err != nil {
+			return
+		}
+	}
+}
+
+func (h *Handler) RegisterStreamRoutes(r *gin.Engine) {
+	r.GET("/api/deployments/:id/logs/stream", h.streamDeploymentLogs)
+}
--- a/backend/internal/api/webhook.go
+++ b/backend/internal/api/webhook.go
@@ -0,0 +1,89 @@
+package api
+
+import (
+	"bytes"
+	"fmt"
+	"io"
+	"net/http"
+	"strconv"
+
+	"clickploy/internal/db"
+	"clickploy/internal/models"
+
+	"github.com/gin-gonic/gin"
+)
+
+func (h *Handler) RegisterWebhookRoutes(r *gin.Engine) {
+	r.POST("/webhooks/trigger", h.handleWebhook)
+}
+
+func (h *Handler) handleWebhook(c *gin.Context) {
+	projectIDHex := c.Query("project_id")
+	if projectIDHex == "" {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "project_id required"})
+		return
+	}
+
+	pid, err := strconv.ParseUint(projectIDHex, 10, 64)
+	if err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid Project ID"})
+		return
+	}
+
+	var project models.Project
+	if result := db.DB.Preload("EnvVars").First(&project, pid); result.Error != nil {
+		c.JSON(http.StatusNotFound, gin.H{"error": "Project not found"})
+		return
+	}
+
+	deployment := models.Deployment{
+		ProjectID: project.ID,
+		Status:    "building",
+		Commit:    "WEBHOOK",
+		Logs:      "Webhook triggered. Starting build...",
+	}
+	if err := db.DB.Create(&deployment).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create deployment record"})
+		return
+	}
+
+	go func() {
+		var logBuffer bytes.Buffer
+		streamer := &StreamWriter{DeploymentID: deployment.ID}
+		multi := io.MultiWriter(&logBuffer, streamer)
+
+		envMap := make(map[string]string)
+		for _, env := range project.EnvVars {
+			envMap[env.Key] = env.Value
+		}
+
+		imageName, err := h.builder.Build(project.RepoURL, project.Name, project.GitToken, project.BuildCommand, project.StartCommand, project.InstallCommand, project.Runtime, envMap, multi)
+		deployment.Logs = logBuffer.String()
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nBuild Failed: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		var envStrings []string
+		for _, env := range project.EnvVars {
+			envStrings = append(envStrings, fmt.Sprintf("%s=%s", env.Key, env.Value))
+		}
+
+		containerID, err := h.deployer.RunContainer(c.Request.Context(), imageName, project.Name, project.Port, envStrings)
+		if err != nil {
+			deployment.Status = "failed"
+			deployment.Logs += fmt.Sprintf("\n\nDeployment Failed: %v", err)
+			db.DB.Save(&deployment)
+			return
+		}
+
+		deployment.Status = "live"
+		deployment.URL = fmt.Sprintf("http://localhost:%d", project.Port)
+		deployment.Logs += fmt.Sprintf("\n\nContainer ID: %s", containerID)
+		db.DB.Save(&deployment)
+	}()
+
+	c.JSON(http.StatusOK, gin.H{"status": "redeployment_started", "deployment_id": deployment.ID})
+}
--- a/backend/internal/auth/utils.go
+++ b/backend/internal/auth/utils.go
@@ -0,0 +1,54 @@
+package auth
+
+import (
+	"errors"
+	"time"
+
+	"github.com/golang-jwt/jwt/v5"
+	"golang.org/x/crypto/bcrypt"
+)
+
+var SecretKey = []byte("super-secret-key-change-me")
+
+type Claims struct {
+	UserID uint   `json:"user_id"`
+	Email  string `json:"email"`
+	jwt.RegisteredClaims
+}
+
+func HashPassword(password string) (string, error) {
+	bytes, err := bcrypt.GenerateFromPassword([]byte(password), 14)
+	return string(bytes), err
+}
+
+func CheckPassword(password, hash string) bool {
+	err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(password))
+	return err == nil
+}
+
+func GenerateToken(userID uint, email string) (string, error) {
+	expirationTime := time.Now().Add(24 * time.Hour)
+	claims := &Claims{
+		UserID: userID,
+		Email:  email,
+		RegisteredClaims: jwt.RegisteredClaims{
+			ExpiresAt: jwt.NewNumericDate(expirationTime),
+		},
+	}
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, claims)
+	return token.SignedString(SecretKey)
+}
+
+func ValidateToken(tokenString string) (*Claims, error) {
+	claims := &Claims{}
+	token, err := jwt.ParseWithClaims(tokenString, claims, func(token *jwt.Token) (interface{}, error) {
+		return SecretKey, nil
+	})
+	if err != nil {
+		return nil, err
+	}
+	if !token.Valid {
+		return nil, errors.New("invalid token")
+	}
+	return claims, nil
+}
--- a/backend/internal/builder/builder.go
+++ b/backend/internal/builder/builder.go
@@ -0,0 +1,138 @@
+package builder
+
+import (
+	"fmt"
+	"io"
+	"net/url"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+)
+
+type Builder struct{}
+
+func NewBuilder() *Builder {
+	return &Builder{}
+}
+
+func (b *Builder) Build(repoURL, appName, gitToken, buildCmd, startCmd, installCmd, runtime string, envVars map[string]string, logWriter io.Writer) (string, error) {
+	workDir := filepath.Join("/tmp", "paas-builds", appName)
+	if err := os.RemoveAll(workDir); err != nil {
+		return "", fmt.Errorf("failed to clean work dir: %w", err)
+	}
+	if err := os.MkdirAll(workDir, 0755); err != nil {
+		return "", fmt.Errorf("failed to create work dir: %w", err)
+	}
+
+	cloneURL := repoURL
+	if gitToken != "" {
+		u, err := url.Parse(repoURL)
+		if err != nil {
+			return "", fmt.Errorf("invalid repo url: %w", err)
+		}
+		u.User = url.UserPassword("oauth2", gitToken)
+		cloneURL = u.String()
+	}
+
+	fmt.Fprintf(logWriter, ">>> Cloning repository %s...\n", repoURL)
+	cloneCmd := exec.Command("git", "clone", "--depth", "1", cloneURL, ".")
+	cloneCmd.Dir = workDir
+	cloneCmd.Stdout = logWriter
+	cloneCmd.Stderr = logWriter
+	if err := cloneCmd.Run(); err != nil {
+		return "", fmt.Errorf("git clone failed: %w", err)
+	}
+
+	if runtime == "" {
+		runtime = "nodejs"
+	}
+
+	var nixPkgs string
+	var defaultInstall, defaultBuild, defaultStart string
+
+	switch runtime {
+	case "bun":
+		nixPkgs = `["bun"]`
+		defaultInstall = "bun install"
+		defaultBuild = "bun run build"
+		defaultStart = "bun run start"
+	case "deno":
+		nixPkgs = `["deno"]`
+		defaultInstall = "deno cache"
+		defaultBuild = "deno task build"
+		defaultStart = "deno task start"
+	case "pnpm":
+		nixPkgs = `["nodejs_20", "pnpm"]`
+		defaultInstall = "pnpm install"
+		defaultBuild = "pnpm run build"
+		defaultStart = "pnpm run start"
+	default:
+		nixPkgs = `["nodejs_20"]`
+		defaultInstall = "npm ci --legacy-peer-deps || npm install --legacy-peer-deps"
+		defaultBuild = "npm run build"
+		defaultStart = "npm run start"
+	}
+
+	installStr := defaultInstall
+	if installCmd != "" {
+		installStr = installCmd
+	}
+
+	buildStr := defaultBuild
+	if buildCmd != "" {
+		buildStr = buildCmd
+	}
+
+	startStr := defaultStart
+	if startCmd != "" {
+		startStr = startCmd
+	}
+
+	nixpacksConfig := fmt.Sprintf(`
+[phases.setup]
+nixPkgs = %s
+
+[phases.install]
+cmds = ["%s"]
+
+[phases.build]
+cmds = ["%s"]
+
+[start]
+cmd = "%s"
+`, nixPkgs, installStr, buildStr, startStr)
+
+	if _, err := os.Stat(filepath.Join(workDir, "package.json")); err == nil {
+		configPath := filepath.Join(workDir, "nixpacks.toml")
+		if err := os.WriteFile(configPath, []byte(nixpacksConfig), 0644); err != nil {
+			return "", fmt.Errorf("failed to write nixpacks.toml: %w", err)
+		}
+	}
+
+	imageName := strings.ToLower(appName)
+
+	fmt.Fprintf(logWriter, "\n>>> Starting Nixpacks build for %s...\n", imageName)
+
+	args := []string{"build", ".", "--name", imageName, "--no-cache"}
+	for k, v := range envVars {
+		args = append(args, "--env", fmt.Sprintf("%s=%s", k, v))
+	}
+
+	nixCmd := exec.Command("nixpacks", args...)
+	nixCmd.Dir = workDir
+	nixCmd.Stdout = logWriter
+	nixCmd.Stderr = logWriter
+
+	nixCmd.Env = append(os.Environ(),
+		"NIXPACKS_NO_CACHE=1",
+	)
+
+	if err := nixCmd.Run(); err != nil {
+		return "", fmt.Errorf("nixpacks build failed: %w", err)
+	}
+
+	fmt.Fprintf(logWriter, "\n>>> Build successful!\n")
+
+	return imageName, nil
+}
--- a/backend/internal/db/db.go
+++ b/backend/internal/db/db.go
@@ -0,0 +1,33 @@
+package db
+
+import (
+	"log"
+	"path/filepath"
+
+	"gorm.io/driver/sqlite"
+	"gorm.io/gorm"
+	"gorm.io/gorm/logger"
+
+	"clickploy/internal/models"
+)
+
+var DB *gorm.DB
+
+func Init(storagePath string) {
+	var err error
+	dbPath := filepath.Join(storagePath, "clickploy.db")
+
+	DB, err = gorm.Open(sqlite.Open(dbPath), &gorm.Config{
+		Logger: logger.Default.LogMode(logger.Info),
+	})
+	if err != nil {
+		log.Fatal("Failed to connect to database:", err)
+	}
+
+	log.Println("Migrating database...")
+	err = DB.AutoMigrate(&models.User{}, &models.Project{}, &models.Deployment{}, &models.EnvVar{}, &models.Database{})
+	if err != nil {
+		log.Fatal("Failed to migrate database:", err)
+	}
+	log.Println("Database initialized successfully")
+}
--- a/backend/internal/deployer/deployer.go
+++ b/backend/internal/deployer/deployer.go
@@ -0,0 +1,65 @@
+package deployer
+
+import (
+	"context"
+	"fmt"
+	"io"
+
+	"github.com/docker/docker/api/types"
+	"github.com/docker/docker/api/types/container"
+	"github.com/docker/docker/client"
+	"github.com/docker/go-connections/nat"
+)
+
+type Deployer struct {
+	cli *client.Client
+}
+
+func NewDeployer() (*Deployer, error) {
+	cli, err := client.NewClientWithOpts(client.FromEnv, client.WithAPIVersionNegotiation())
+	if err != nil {
+		return nil, fmt.Errorf("failed to create docker client: %w", err)
+	}
+	return &Deployer{cli: cli}, nil
+}
+
+func (d *Deployer) RunContainer(ctx context.Context, imageName, appName string, hostPort int, envVars []string) (string, error) {
+	config := &container.Config{
+		Image: imageName,
+		ExposedPorts: nat.PortSet{
+			"3000/tcp": struct{}{},
+		},
+		Env: envVars,
+	}
+
+	hostConfig := &container.HostConfig{
+		PortBindings: nat.PortMap{
+			"3000/tcp": []nat.PortBinding{
+				{
+					HostIP:   "0.0.0.0",
+					HostPort: fmt.Sprintf("%d", hostPort),
+				},
+			},
+		},
+		RestartPolicy: container.RestartPolicy{
+			Name: "unless-stopped",
+		},
+	}
+
+	_ = d.cli.ContainerRemove(ctx, appName, types.ContainerRemoveOptions{Force: true})
+
+	resp, err := d.cli.ContainerCreate(ctx, config, hostConfig, nil, nil, appName)
+	if err != nil {
+		return "", fmt.Errorf("failed to create container: %w", err)
+	}
+
+	if err := d.cli.ContainerStart(ctx, resp.ID, types.ContainerStartOptions{}); err != nil {
+		return "", fmt.Errorf("failed to start container: %w", err)
+	}
+
+	return resp.ID, nil
+}
+
+func (d *Deployer) StreamLogs(ctx context.Context, containerID string) (io.ReadCloser, error) {
+	return d.cli.ContainerLogs(ctx, containerID, types.ContainerLogsOptions{ShowStdout: true, ShowStderr: true, Follow: true})
+}
--- a/backend/internal/models/models.go
+++ b/backend/internal/models/models.go
@@ -0,0 +1,56 @@
+package models
+
+import (
+	"gorm.io/gorm"
+)
+
+type User struct {
+	gorm.Model
+	Email    string    `gorm:"uniqueIndex;not null" json:"email"`
+	Password string    `json:"-"`
+	Name     string    `json:"name"`
+	Avatar   string    `json:"avatar"`
+	Projects []Project `gorm:"foreignKey:OwnerID" json:"projects"`
+}
+
+type Project struct {
+	gorm.Model
+	Name           string       `gorm:"uniqueIndex" json:"name"`
+	RepoURL        string       `json:"repo_url"`
+	OwnerID        uint         `json:"owner_id"`
+	Port           int          `json:"port"`
+	WebhookSecret  string       `json:"webhook_secret"`
+	GitToken       string       `json:"-"`
+	BuildCommand   string       `json:"build_command"`
+	StartCommand   string       `json:"start_command"`
+	InstallCommand string       `json:"install_command"`
+	Runtime        string       `json:"runtime"`
+	Deployments    []Deployment `gorm:"foreignKey:ProjectID" json:"deployments"`
+	EnvVars        []EnvVar     `gorm:"foreignKey:ProjectID" json:"env_vars"`
+}
+
+type EnvVar struct {
+	gorm.Model
+	ProjectID uint   `json:"project_id"`
+	Key       string `json:"key"`
+	Value     string `json:"value"`
+}
+
+type Deployment struct {
+	gorm.Model
+	ProjectID uint    `json:"project_id"`
+	Project   Project `json:"project" gorm:"constraint:OnUpdate:CASCADE,OnDelete:CASCADE;"`
+	Status    string  `json:"status"`
+	Commit    string  `json:"commit"`
+	Logs      string  `json:"logs"`
+	URL       string  `json:"url"`
+}
+
+type Database struct {
+	gorm.Model
+	Name    string  `json:"name"`
+	Type    string  `json:"type"`
+	Status  string  `json:"status"`
+	OwnerID uint    `json:"owner_id"`
+	SizeMB  float64 `json:"size_mb"`
+}
--- a/backend/internal/ports/ports.go
+++ b/backend/internal/ports/ports.go
@@ -0,0 +1,80 @@
+package ports
+
+import (
+	"fmt"
+	"net"
+	"sync"
+)
+
+type Manager struct {
+	mu          sync.Mutex
+	startPort   int
+	endPort     int
+	allocations map[string]int
+}
+
+func NewManager(start, end int) *Manager {
+	return &Manager{
+		startPort:   start,
+		endPort:     end,
+		allocations: make(map[string]int),
+	}
+}
+
+func (m *Manager) GetPort(appName string, specificPort int) (int, error) {
+	m.mu.Lock()
+	defer m.mu.Unlock()
+
+	if port, exists := m.allocations[appName]; exists {
+		if specificPort > 0 && specificPort != port {
+			return 0, fmt.Errorf("app %s is already running on port %d", appName, port)
+		}
+		return port, nil
+	}
+
+	if specificPort > 0 {
+		if err := m.checkPortAvailable(specificPort); err != nil {
+			return 0, err
+		}
+		m.allocations[appName] = specificPort
+		return specificPort, nil
+	}
+
+	for port := m.startPort; port <= m.endPort; port++ {
+		if err := m.checkPortAvailable(port); err == nil {
+			if !m.isPortAllocatedInternal(port) {
+				m.allocations[appName] = port
+				return port, nil
+			}
+		}
+	}
+
+	return 0, fmt.Errorf("no available ports in range %d-%d", m.startPort, m.endPort)
+}
+
+func (m *Manager) isPortAllocatedInternal(port int) bool {
+	for _, p := range m.allocations {
+		if p == port {
+			return true
+		}
+	}
+	return false
+}
+
+func (m *Manager) checkPortAvailable(port int) error {
+	if port < m.startPort || port > m.endPort {
+		return fmt.Errorf("port %d is out of allowed range %d-%d", port, m.startPort, m.endPort)
+	}
+
+	if m.isPortAllocatedInternal(port) {
+		return fmt.Errorf("port %d is internally allocated", port)
+	}
+
+	addr := fmt.Sprintf("localhost:%d", port)
+	conn, err := net.Dial("tcp", addr)
+	if err != nil {
+		return nil
+	}
+	_ = conn.Close()
+	return fmt.Errorf("port %d is already in use", port)
+}