Restricted networks

Last updated: 20 September 2026

Sandman is self-hosted and suitable for locked-down environments:

• If Let’s Encrypt is unreachable, upload your own HTTPS certificate in Settings.
• The appliance must reach Azure Resource Manager (public or private endpoints) to manage VMs.
• Teams notifications require outbound HTTPS to your Logic App URL — omit if unavailable.
• Updates can be installed from local media or an internal package mirror.