SaaS mode is for teams that want a managed control plane while keeping the same Nanami object model (workspaces, groups, networks, nodes, gateways).
APP_MODE=saas is the current enterprise runtime wiring mode in the
repo. It does not, by itself, define a supported customer-hosted
Enterprise Self-Hosted lifecycle contract.
What Nanami manages
- control-plane hosting and lifecycle,
- hosted WebUI surface,
- platform-level updates to managed components.
What your team manages
- network and ownership modeling,
- node and gateway rollout,
- routing and access decisions,
- incident response for your infrastructure.
Typical onboarding flow
- Create workspace.
- Create groups and initial networks.
- Register gateway and node infrastructure.
- Validate private connectivity with a pilot service.
- Expand to additional teams and regions.
Diagram (text)
Managed control plane + hosted UI + your gateways/nodes + WireGuard data plane
Recommended first production milestone
Before broad rollout, ensure:
- at least one stable gateway path per critical region,
- clear group ownership for each network,
- documented rollback steps for routing changes.