Pages
Internal test phase: versions are internal, and these docs are for internal testers and an introduction to Douklar.
Douklar docs
Self-hosted workspace for moving ECR images, S3 objects, CodeCommit repositories and DynamoDB items between AWS accounts and Regions.
Start here
- Overview
What Douklar is, what it moves, how a move works, and what it deliberately does not do.
- Quick start: your first move
From install to a recorded run in Activity, one S3 bucket from one account to another, in about ten minutes.
- Install locally
Run the Douklar stack on one Linux host with Docker, then sign in to the console.
Guides
- Accounts and credentials
One profile per AWS account, its credentials, and the checks that keep them valid.
- Discovery and mappings
Find the resources in each account and map each source to its destination.
- Preflight and Review
The read-only checks that run before any write, and the review step that lists what will be written.
- Running a sync
How a reviewed run is queued, executed, verified and retried.
- Activity and evidence
The durable record of every run, and how to re-run or retry from it.
- S3 Batch Operations
The dedicated console for large S3 copies with AWS S3 Batch Operations, from readiness to completion report.
- Hand a change to the other account's admin
When a move needs a permission in an account you do not run, Douklar shows the exact statement for that account's admin to apply.
- Sign-in with ZITADEL or Cognito
Choose the identity provider for the console, set the values Douklar reads, and map your admin group.
- Use an external PostgreSQL (RDS, Supabase)
Keep Douklar's state in Amazon RDS, Supabase or another PostgreSQL instead of the local container.
Reference
- The douklar CLI
Plan and run syncs, manage config and verify ECR mappings from a terminal.
- Console map
Every area of the web console, what you do there, and which role can open it.
- Configuration and environment variables
The files Douklar reads and the environment variables an operator sets most often, with their defaults.
- AWS permissions per service
What each profile needs in AWS, read and write, for discovery, preflight and each kind of move.
- Error codes
The error codes the console's API returns, with the HTTP status, whether a retry can help, and what to do.
- Limits
Ceilings, timeouts and known gaps that bound what a run can do.
- Glossary
The words Douklar uses, and what each one means in the product.
Explanation
- How a run works
What happens between pressing Run and reading the record: the queue, the worker, the states a run can end in, and where the bytes go.
Help
- Troubleshooting
Symptom, check, fix for the problems the install and the first runs meet most often.