lbedner/aegis-stack: A production-ready FastAPI platform with modular components and a built-in control plane. · GitHub

Aegis Stack is an open-source CLI that scaffolds production-ready FastAPI applications and lets you add, remove, and update components and services on existing projects without rewrites.

You need to ship reliable software, but management only gave you 2 weeks.

No time for health checks, proper testing, or clean architecture. Just enough time for duct tape and hope.

What if you could go from idea to working prototype in the time it takes to grab coffee?

Ship FastAPI apps that grow with you.

Aegis Stack scaffolds complete FastAPI applications with auth, payments, workers, AI, and a built-in control plane. Add what you need, remove what you don't, update when the framework improves.

uvx aegis-stack init my-api

init opens a full-screen guided setup that walks through every component and service with explanations. Prefer the classic one-line prompts? Pass --quick.

# Skip the guided setup, use the classic one-line prompts
uvx aegis-stack init my-api --quick

# Add user authentication out of the box
uvx aegis-stack init user-app --services auth

# Add background processing + scheduling
uvx aegis-stack init task-processor --components scheduler,worker

# Everything wired up at init
uvx aegis-stack init full-app --services auth,payment,comms --components worker,scheduler

CLI in 9 languages: English, German, Spanish, French, Japanese, Korean, Russian, Simplified Chinese, Traditional Chinese. Run e.g. uvx aegis-stack --lang zh init my-api, or set AEGIS_LANG=zh.

Installation alternatives: See the Installation Guide for uv tool install, pip install, and development setup.

Components are infrastructure pieces (database, workers, scheduler, cache). Services are business capabilities (auth, AI, payments, comms).

Don't worry about what you pick today. Add anything later with a single command, remove what you outgrow, no rework required.

Component	What you get
Backend	FastAPI + lifecycle hooks, in-memory request metrics, API load testing for every route
CLI	Typer, first-class system interface
Frontend	Flet, ships with the Overseer system dashboard
Web Frontend	Server-rendered pages at /: Jinja2 + htmx + Alpine, Tailwind/DaisyUI styling
Cache	Redis for caching, sessions, pub/sub
Database	Postgres (self-hosted or Neon serverless) or SQLite + SQLModel ORM
Inference	Local AI models via Ollama
Ingress	Traefik v3 reverse proxy with TLS
Observability	Pydantic Logfire tracing + metrics + logging
Scheduler	APScheduler with persistent jobs
Worker	Pluggable Arq, Taskiq, or Dramatiq

Components Docs →

Service	What you get
AI	Conversational agents, RAG, model catalog, TTS and STT (PydanticAI / LangChain across 7 providers)
Auth	Persistent sessions with refresh-token rotation, GitHub/Google sign-in, RBAC, multi-tenant Organizations
Blog	Markdown publishing with drafts, tags, and an Overseer editor
Comms	Transactional email (Resend) + SMS / voice (Twilio)
Insights	Adoption metrics across GitHub, PyPI, Plausible, Reddit
Payments	Stripe checkout, subscriptions, refunds, disputes

Services Docs →

Aegis Stack is the orchestration layer. Services and components wire into best-in-class tools you already trust, so you keep your vendor choices and your data.

Every generated project ships with GitHub Actions and developer tooling pre-wired, so the first push to GitHub runs checks automatically, and one command wires up continuous deployment to your server.

Capability	What you get	Status
CI Workflow	Lint, type checking, and tests on every push and PR (parallel jobs, cached)
Code Scanning	CodeQL static analysis on every PR and on a weekly schedule
Pre-commit	Ruff, ruff-format, and type-check hooks (opt-in)
Continuous Deploy	Generates a dedicated SSH deploy key, installs it on your server, pushes secrets to GitHub, and scaffolds a deploy workflow (manual trigger by default)

Capability	What you get
Deploy CLI	One-command deploys to any VPS over SSH (rsync + Docker), no PaaS lock-in
Server Setup	aegis deploy-setup provisions Ubuntu, Debian, or Fedora boxes (Docker + firewall)
Backups & Rollback	pg_dump before every deploy, retention policy, automatic rollback on failed health checks
TLS / HTTPS	Let's Encrypt via the Traefik ingress component, zero config when a domain is set

Deployment Docs →

Your choices aren't permanent. Start with what you need today, add when requirements change, remove what you outgrow.

# Monday: Ship MVP
aegis init my-api

# Week 3: Add scheduled reports
aegis add scheduler --project-path ./my-api

# Month 2: Need async workers
aegis add worker --project-path ./my-api

# Month 6: Scheduler not needed
aegis remove scheduler --project-path ./my-api

# Stay current with template improvements
aegis update

Most starters lock you in at init. Aegis Stack doesn't. See Evolving Your Stack for the complete guide.

Live Demo: sector-7g.dev/dashboard

Overseer is the embedded control plane that ships with every Aegis Stack project.

• Live health of every component and service in one view
• Worker queues, scheduled jobs, recent runs
• Database schema, tables, and migration state
• AI token usage and conversation history
• Auth sessions and user activity
• No external tooling, no vendor integrations, no setup

The Aegis CLI is a first-class interface to your running system. Not just a health check, but a full inspection layer.

• Component-aware commands for every running subsystem
• Inspect worker queues, scheduler runs, database state
• Query AI usage, auth sessions, service configuration
• Same data Overseer sees, terminal-native
• Built into every generated project, no extra installs

When the AI service is enabled, Aegis exposes an additional interface: Illiana, a conversational operator over your running system.

• Ask questions in plain language about live system state
• Backed by live telemetry from Overseer and the CLI
• Optional RAG over your codebase for code-aware answers
• Opt-in: only available when the AI service is on
• Nothing in the stack depends on her being there

• Aegis Pulse - Package analytics with honest decomposition (Total / Filtered / Human)
• Sector 7G - Live demo: millions of tasks on a single $5 VPS, zero restarts
• NWVault Revival - Searchable archive of the original Neverwinter Vault (2002-2014), built in 24 hours

• Overseer - Built-in system dashboard
• Deployment - Deploy with backups, rollback, and health checks
• CLI Reference - Complete command reference
• Evolving Your Stack - Add/remove components as needs change
• Technology Stack - Battle-tested technology choices
• About - The philosophy and vision behind Aegis Stack

No reinventing the wheel. Just the tools you already know, pre-configured and ready to compose.

Aegis Stack respects your expertise. No custom abstractions or proprietary patterns to learn. Pick your components, get a production-ready foundation, and build your way.

Aegis gets out of your way so you can get started.