SaaS mode is for teams that want a managed control plane and managed gateway runtime while keeping the same Nanami object model for workspaces, groups, networks, and devices.
APP_MODE=saas is the current enterprise runtime wiring mode in the
repo. It does not, by itself, define a supported customer-hosted
Enterprise Self-Hosted lifecycle contract.
What Nanami manages
- control-plane hosting and lifecycle,
- hosted WebUI surface,
- shared gateway-manager and gateway-daemon runtime pool,
- platform-level updates to managed components.
What your team manages
- network and ownership modeling,
- device/node rollout,
- routing and access decisions,
- incident response for your infrastructure.
Typical onboarding flow
- Create workspace.
- Create groups and initial networks.
- Connect the first device or node.
- Validate private connectivity with a pilot service.
- Expand to additional teams and regions.
Diagram (text)
Managed control plane + hosted UI + shared Nanami gateway pool + your devices/nodes + WireGuard data plane
Recommended first production milestone
Before broad rollout, ensure:
- Nanami Cloud gateway posture is healthy in the internal operator dashboard,
- clear group ownership for each network,
- documented rollback steps for routing changes.