Servers
Ubuntu hosts identified by canonical IP address.
Preflight
A check verifies the pinned SSH host key, key login, Ubuntu, passwordless sudo, Docker, Caddy, and disk space. A deployment repeats credential and server checks before it builds.
Host trust
Towbar never silently accepts an SSH host key. The first connection fails closed and asks an operator to verify the SHA-256 fingerprint through an independent channel.