Deploy from Git.One binary. 52 MB.
Rivetr is a self-hosted platform as a service in a single Rust binary: embedded SQLite, embedded reverse proxy, automatic HTTPS, and 365 one-click services. No Redis. No PostgreSQL. No Traefik. Just Docker or Podman.
v1.0.0 shipped 5 November 2026. Measured, not estimated.
52 MB
RSS with 30 containers
8 threads, measured on 1.0.0
0
External services
no Redis, Postgres, or Traefik
365
Service templates
one-click, across 26 categories
9
Managed databases
Postgres, MySQL, Redis, ClickHouse
The open-source alternative to managed platforms
Self-host the developer experience of Vercel, Heroku, and Railway on your own servers, with no vendor lock-in and no bill per seat.
Deploy anything, works with your stack
The dashboard
A real control plane, not a config file
Apps, databases, services, servers, deployments, and 365 templates from one UI. Or use the CLI, the TUI, the API, or the MCP server. Everything ships in the binary.
01 / 04
Every project, one glance
Projects show a health pill, their environments, and every app, database, and service inside. Failing resources sort first.
- Available in
- 1.0.0
- Needs
- Docker or Podman
- External services
- None
Released 5 November 2026
What landed in 1.0
The largest release so far rebuilt the dashboard, added real service deployments, passkeys, traffic analytics, and a way to roll back database data with the app.
A rebuilt dashboard
Grouped sidebar, breadcrumb switchers, a status pill, and consistent sections across apps, databases, and services.
Read moreProjects canvas
A zoomable map of every project, environment, and resource with live status. Switch between list, grid, and canvas.
Read moreMake it yours
Per-user theme customisation: light, dark, or system, accent, neutral, radius, density, font, and accessibility options.
Read morePasskeys and traffic analytics
Sign in with a passkey, then see per-app, per-server, and per-team traffic with optional GeoIP country breakdown.
Read moreReal Docker Compose deploys
Deploy, build, hook, and roll back compose services by image digest, with encrypted env vars and per-container terminals.
Read moreRollback with data
Snapshot linked PostgreSQL, MySQL, MariaDB, MongoDB, Redis, and KeyDB databases before a deploy, then restore on rollback.
Read moreEverything included
One binary. Every feature you'd expect, and a few you wouldn't.
No add-ons, paid tiers, or feature flags. Everything ships in the binary, including the parts other tools make you run as separate services.
Deploy from Git
Clone, build, check, switch. The whole path from push to live.
Git-native deploys
GitHub, GitLab, Gitea, Bitbucket, or any Git URL. Webhook signature verification, deploy by branch, commit SHA, or tag.
Any build type
Dockerfile, Nixpacks, Railpack, Cloud Native Buildpacks, static sites, or a prebuilt image. Auto-detected per app.
Zero-downtime releases
Health check, atomic proxy switch, then drain in-flight requests from the old container. Automatic rollback when the check fails.
Preview environments
Every pull request gets its own subdomain, on all four Git providers. Preview apps are removed when the PR closes or merges.
Platform services
The supporting infrastructure, provisioned from the same dashboard.
Managed databases
PostgreSQL 18, MySQL, MariaDB, MongoDB, Redis, DragonflyDB, KeyDB, ClickHouse, and LibSQL. Link one to an app and its env vars are injected.
Docker Compose services
Deploy with a button, build from Git or a server path, run pre- and post-deploy hooks, and roll back by image digest.
365 service templates
AI, analytics, CMS, monitoring, security, and more, across 26 categories. One click, encrypted variables, running.
Scheduled jobs and restarts
Cron-based commands inside running containers, plus zero-downtime scheduled restarts with run history and failure notifications.
Teams and security
Multi-tenant from the first login, encrypted at rest, audited throughout.
Passkeys, 2FA, and SSO
Passkey sign-in, TOTP with recovery codes, OAuth through five providers, and any OpenID Connect provider for SSO.
Roles and permissions
Five role presets built from 24 abilities, custom roles per team, per-member resource overrides, and view-only app sharing.
Encrypted secrets
AES-256-GCM with a versioned format and per-install salt. External managers: Vault, OpenBao, Infisical, Doppler, AWS Secrets Manager.
Scoped API tokens
rvt_ tokens stored as SHA-256 hashes, with six scopes, optional team or project limits, expiry, pause, and roll.
Operations
Know what is running, why it broke, and what to do next.
Live logs and search
Stream over WebSocket or SSE, search deployment history, and set per-app retention. Long lines stay inside the log pane.
Metrics and traffic
Prometheus /metrics, health-check latency, uptime, and per-app, per-server, and per-team traffic with optional GeoIP.
Crash recovery
Restart with exponential backoff and configurable limits. Apply CPU and memory limits live with docker update, no redeploy.
Deploy controls
Approvals, freeze windows, scheduled deploys, watch paths, ZIP uploads, and cancellation of queued or running deployments.
Developer experience
A dashboard, a terminal, an editor, and an API. Pick your surface.
Projects canvas
A zoomable view of projects, environments, and resources with live status, filters, and a side panel. Also list and grid views.
Browser terminal and files
Shell into containers and remote SSH servers, and browse, read, write, or delete files on any registered server.
TUI, CLI, and MCP
rivetr tui for a keyboard-driven dashboard, a full CLI, and a built-in MCP server with 11 tools for AI assistants.
Theme customisation
Each user picks mode, accent, neutral, radius, density, font, sidebar style, reduced motion, and high contrast.
Scale and backup
More servers, more replicas, and a way back when something goes wrong.
Multi-server deploys
Build once, then roll the image to servers in batches, with health checks per container and traffic shifting batch by batch.
Docker Swarm
Initialise a swarm, manage nodes, scale services, and tune the service spec with placement, update, and rollback policy.
Build servers and registries
Offload builds to dedicated nodes and push the finished image to any registry, or stream it over SSH when no registry is available.
Database, volume, and instance backups
On a schedule, to local disk or S3-compatible storage, with retention and one-click restore. S3 downloads are checked against the stored size and SHA-256 first.
Service gallery
One-click services, ready to deploy
Databases, AI models, analytics, monitoring, CMS, and more. Every template is a reviewed compose definition with encrypted variables, ready to deploy.
365
one-click services across 26 categories
AI / LLM
Ollama · Open WebUI · LiteLLM
Analytics
Plausible · Matomo · Metabase
CMS
WordPress · Ghost · Strapi
Databases
PostgreSQL · MongoDB · Redis
Dev tools
Gitea · Drone · Vault
Monitoring
Grafana · Uptime Kuma · Prometheus
Automation
n8n · Node-RED · Activepieces
Communication
Rocket.Chat · Mattermost · Element
Files and media
Nextcloud · Jellyfin · MinIO
Search
Meilisearch · Typesense · SearXNG
Security
Vaultwarden · Authelia · Keycloak
Project management
Plane · Vikunja · Focalboard
Templates ship in the binary and are maintained in the repository. New ones are welcome as pull requests. Contribute on GitHub.
How it works
From zero to deployed in three steps
Install the binary
One command installs Docker if needed, build tools, the latest Rivetr binary, a systemd unit, and a config with a generated admin token.
curl -fsSL https://raw.githubusercontent.com/KwaminaWhyte/rivetr/main/install.sh | sudo bashConnect a repo
Add a Git provider or GitHub App, create an app, and point it at a repository. Rivetr detects the build type or you pin one.
rivetr deploy my-appPush to deploy
Every push builds, health checks, and swaps traffic atomically. Certificates are provisioned automatically for your domains.
git push origin main # live in seconds- RSS, 30 containers
- 52 MB
- Release binary
- 47 MB
- One-click services
- 365
- Managed databases
- 9
- Git providers
- 4
- Free forever
- MIT
How it compares
Same idea. A fraction of the footprint.
Coolify and Dokploy are the two best-known self-hosted PaaS alternatives. Rows below were checked against their docs and releases on 7 November 2026 (Coolify v4.6.0, Dokploy v0.31.0).
Rivetr memory is a measured RSS figure with 30 containers on 1.0.0. Competitor figures are from their published documentation, not measurements by us. See the comparison notes for sources.
Security
Built to face the internet
A deployment platform holds your SSH keys, registry credentials, database passwords, and every secret your apps need. Rivetr treats them that way.
Read the security notes- AES-256-GCM secrets with a per-install salt
- Scoped rvt_ tokens stored as SHA-256 hashes
- Passkeys, TOTP 2FA, OIDC SSO
- Audit log and team-level 2FA enforcement
- CSP, HSTS, and SSH host key pinning
- Rate limits and per-account lockout
Rivetr also includes an audit log for user and team actions, SSH host key pinning for managed servers, and trusted-proxy-aware rate limiting with per-account lockout.
FAQ
Questions, answered
Rivetr 1.0.0 · MIT licensed
Ship your first app in minutes
One command installs Docker, the build tools, the binary, a systemd unit, and a generated admin token. Linux with Docker or Podman is all you need.
curl -fsSL https://raw.githubusercontent.com/KwaminaWhyte/rivetr/main/install.sh | sudo bash