Aegis Stack is an open-source CLI that scaffolds production-ready FastAPI applications and lets you add, remove, and update components and services on existing projects without rewrites.
You need to ship reliable software, but management only gave you 2 weeks.
No time for health checks, proper testing, or clean architecture. Just enough time for duct tape and hope.
What if you could go from idea to working prototype in the time it takes to grab coffee?
Ship FastAPI apps that grow with you.
Aegis Stack scaffolds complete FastAPI applications with auth, payments, workers, AI, and a built-in control plane. Add what you need, remove what you don't, update when the framework improves.
Quick Start
uvx aegis-stack init my-apiinit opens a full-screen guided setup that walks through every component and service with explanations. Prefer the classic one-line prompts? Pass --quick.
More examples
# Skip the guided setup, use the classic one-line prompts
uvx aegis-stack init my-api --quick
Add user authentication out of the box
uvx aegis-stack init user-app --services auth
Add background processing + scheduling
uvx aegis-stack init task-processor --components scheduler,worker
Everything wired up at init
uvx aegis-stack init full-app --services auth,payment,comms --components worker,schedulerCLI in 9 languages: English, German, Spanish, French, Japanese, Korean, Russian, Simplified Chinese, Traditional Chinese. Run e.g.uvx aegis-stack --lang zh init my-api, or setAEGIS_LANG=zh.
Installation alternatives: See the Installation Guide for uv tool install, pip install, and development setup.
Customizing Your Stack
!Aegis Stack spinning up a new project
Components are infrastructure pieces (database, workers, scheduler, cache). Services are business capabilities (auth, AI, payments, comms).
Don't worry about what you pick today. Add anything later with a single command and remove what you outgrow. Where a change touches files you've edited, your edits are merged in, and anything that can't merge cleanly is marked for you to review.
Components
| Component | What you get | |
|---|---|---|
| Backend | FastAPI on uvicorn or granian, lifecycle hooks, in-memory request metrics, API load testing for every route | !Always |
| CLI | Typer, first-class system interface | !Always |
| Frontend | Flet, ships with the Overseer system dashboard | !Always |
| Web Frontend | Server-rendered pages at /: Jinja2 + htmx + Alpine, Tailwind/DaisyUI styling | !Optional |
| Cache | Redis for caching, sessions, pub/sub | !Optional |
| Database | Postgres (self-hosted or Neon serverless) or SQLite + SQLModel ORM | !Optional |
| Inference | Local AI models via Ollama | !Optional |
| Ingress | Traefik v3 reverse proxy with TLS | !Optional |
| Observability | Pydantic Logfire tracing + metrics + logging | !Optional |
| Storage | S3 object storage for the files an app keeps, SeaweedFS in dev | !Optional |
| Scheduler | APScheduler with persistent jobs | !Optional |
| Secrets | Encrypted credential store: keys set while the app runs, checked with the provider on paste, never shown again | !Optional |
| Worker | Pluggable Arq, Taskiq, or Dramatiq | !Optional |
Services
| Service | What you get | | |---|---|---| | AI | Conversational agents, RAG, model catalog, TTS and STT (PydanticAI / LangChain across 7 providers) | !Optional | | Auth | Persistent sessions with refresh-token rotation, GitHub/Google sign-in, RBAC, multi-tenant Organizations | !Optional | | Blog | Markdown publishing with drafts, tags, and an Overseer editor | !Optional | | Comms | Transactional email (Resend) + SMS / voice (Twilio) | !Optional | | Documents | Content-addressed document store, deduped, with page-addressed extraction | !Optional | | Insights | Adoption metrics across GitHub, PyPI, Plausible, Reddit | !Optional | | Payments | Stripe checkout, subscriptions, refunds, disputes | !Optional |
Plugins
What the built-in services don't cover can come from a plugin: a Python package that adds routes, tables, a CLI and a dashboard card, and goes in and out the same way (aegis add , aegis remove ). Browse them at aegis-stack.io/plugins or with aegis plugins search, and start your own with aegis plugins create.
Integrations
Aegis Stack is the orchestration layer. Services and components wire into best-in-class tools you already trust, so you keep your vendor choices and your data.
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
CI/CD for Your Stack
Every generated project ships with GitHub Actions and developer tooling pre-wired, so the first push to GitHub runs checks automatically, and one command wires up continuous deployment to your server.
| Capability | What you get | Status |
|---|---|---|
| CI Workflow | Lint, type checking, and tests on every push and PR (parallel jobs, cached) |  |
| Code Scanning | CodeQL static analysis on every PR and on a weekly schedule | |
| Pre-commit | Ruff, ruff-format, and type-check hooks (opt-in) |  |
| Continuous Deploy | Generates a dedicated SSH deploy key, installs it on your server, pushes secrets to GitHub, and scaffolds a deploy workflow (manual trigger by default) | |
Deploying Your Stack
| Capability | What you get | |
|---|---|---|
| Deploy CLI | One-command deploys to any VPS over SSH (rsync + Docker), no PaaS lock-in | !Available |
| Server Setup | aegis deploy-setup provisions Ubuntu, Debian, or Fedora boxes (Docker + firewall) | !Available |
| Backups & Rollback | pg_dump before every deploy, retention policy, automatic rollback on failed health checks | !Available |
| TLS / HTTPS | Let's Encrypt via the Traefik ingress component, zero config when a domain is set | !Optional |
Your Stack Grows With You
Your choices aren't permanent. Start with what you need today, add when requirements change, remove what you outgrow.
# Monday: Ship MVP
aegis init my-api
Week 3: Add scheduled reports
aegis add scheduler --project-path ./my-api
Month 2: Need async workers
aegis add worker --project-path ./my-api
Month 6: Scheduler not needed
aegis remove scheduler --project-path ./my-api
Stay current with template improvements
aegis update| Starter | Add Later? | Remove Later? | Git Conflicts? | |-----------|------------|---------------|----------------| | Others | Locked at init | Manual deletion | High risk | | Aegis Stack | One command | One command | Merged, conflicts marked for review |
Most starters lock you in at init. Aegis Stack doesn't. See Evolving Your Stack for the complete guide.
Overseer - Your Application's Control Plane
Live Demo: sector-7g.dev/dashboard
Overseer is the embedded control plane that ships with every Aegis Stack project.
- Live health of every component and service in one view
- Worker queues, scheduled jobs, recent runs
- Database schema, tables, and migration state
- AI token usage and conversation history
- Auth sessions and user activity
- No external tooling, no vendor integrations, no setup
CLI - First-Class System Interface
The Aegis CLI is a first-class interface to your running system. Not just a health check, but a full inspection layer.
- Component-aware commands for every running subsystem
- Inspect worker queues, scheduler runs, database state
- Query AI usage, auth sessions, service configuration
- Same data Overseer sees, terminal-native
- Built into every generated project, no extra installs
Illiana - Optional System Operator
When the AI service is enabled, Aegis exposes an additional interface: Illiana, a conversational operator over your running system.
- Ask questions in plain language about live system state
- Backed by live telemetry from Overseer and the CLI
- Optional RAG over your codebase for code-aware answers
- Opt-in: only available when the AI service is on
- Nothing in the stack depends on her being there
Powered By Aegis Stack
- Aegis Pulse - Package analytics with honest decomposition (Total / Filtered / Human)
- Sector 7G - Live demo: millions of tasks on a single $5 VPS, zero restarts
- NWVault Revival - Searchable archive of the original Neverwinter Vault (2002-2014), built in 24 hours
Learn More
- Overseer - Built-in system dashboard
- Deployment - Deploy with backups, rollback, and health checks
- Plugins - Extend a project with third-party packages, or write your own
- CLI Reference - Complete command reference
- Evolving Your Stack - Add/remove components as needs change
- Technology Stack - Battle-tested technology choices
- About - The philosophy and vision behind Aegis Stack
For The Veterans
No reinventing the wheel. Just the tools you already know, pre-configured and ready to compose.
Aegis Stack respects your expertise. No custom abstractions or proprietary patterns to learn. Pick your components, get a production-ready foundation, and build your way.
Aegis gets out of your way so you can get started.