Open source & free forever
Deploy anything, own every bit.
Vessl is a sub-30MB daemon that turns any Linux server into a full deployment platform. Apps, databases, domains, backups, and a Traefik-powered proxy — one binary, your servers.
$
curl -fsSL https://get.vessl.dev | shCloud
1,200+ servers online
Self-hosted
<30MB single binary
vessl daemonCONNECTED
HOSTprod-eu-1.acme.com
AGENTv0.5.1
PROXYtraefik v3.1
NETWORKvessl-network
TUNNELyamux / active
Capabilities on this node
apps
databases
cron-jobs
backups → S3
domains + SSL
env secrets
canvas view
log tailing
Runs whatever your team ships.
If it has a Dockerfile — or even if it doesn't — Vessl can build and run it on your server.
Everything on your server.
Vessl isn't a wrapper — it's a daemon with real opinions: Traefik for routing, Docker for isolation, S3 for backups, Yamux for the fleet tunnel.
- Canvas View
- See your entire environment at a glance — apps, databases, and their connections laid out as a live topology map, not a flat list.
- Traefik-backed Routing
- Vessl spins up and manages Traefik automatically — zero-config load balancing, path routing, and automatic SSL for every service you deploy.
- Git-native Deployments
- Connect GitHub, GitLab, or Gitea. Push a branch, get a deployment. No YAML pipelines. No external CI required.
- Environment Scoping
- Group apps and services into named environments — staging, production, preview — each with isolated variables and their own deployment flow.
- Database Snapshots
- Schedule automatic database backups to any S3-compatible storage. Configure retention windows and restore from any checkpoint.
- AI Settings Layer
- Each team configures its own LLM provider — OpenAI, Anthropic, local Ollama. Vessl routes completions, never stores keys plaintext.
- Usage Metering
- The cloud tracks container-hours, deployments, and bandwidth per team. Set thresholds, get notified, never hit an unexpected bill.
- Yamux Tunnel Fleet
- Vessl Cloud connects to your daemons via an encrypted Yamux tunnel — no port-forwarding, no VPN. Your servers are never directly exposed.
- Scoped Secret Vars
- Inject environment variables per-service or per-environment. Secrets encrypted at rest, never visible in logs or build output.
- Cron Jobs
- Define recurring jobs alongside your services — same project, same env vars, same log stream. No separate scheduler needed.
- Notification Channels
- Route events — build failure, cert expiry, usage spikes — to email, webhook, or Discord. Configurable per project.
- Team Workspaces
- Invite members, assign roles, and isolate projects per team. The Cloud dashboard enforces plan limits so billing stays predictable.