docs / Operating

Agents & deployment

The agent is a small program (written in Go) installed on each target server. It's how certificates actually reach your infrastructure.

Enroll

curl -fsSL https://api.nolapse.io/install.sh | sudo bash -s -- --token <token>

The agent talks to the control plane over mTLS (a per-machine client certificate); the enroll token is single-use.

Supported targets

  • nginx — writes the cert and reloads
  • IIS — binds the certificate
  • PAN-OS / FortiOS — pushed through the device API (not files on disk)

The agent connects only to agents.nolapse.io — the control plane trusts an agent's identity only on that host (mTLS), so it can't be spoofed.

← Inventory & statusesNetwork Discovery →