curl -fsSL https://raw.githubusercontent.com/bablilayoub/nixploy/main/install.sh | sudo bash
Why Nixploy
- HTTPS without touching nginx or certbot. Point DNS at the box, type the domain. Traefik issues and renews the certificate.
- Deploy from Git, a Docker image, or a zip. Nixpacks, Railpack, Dockerfile, buildpacks or static — detected, cached, and cancellable.
- A database is one click, and so is restoring it. Postgres, MySQL, MariaDB, MongoDB, Redis, with encrypted backups to S3 or disk and verified restores.
- See why it broke. Live logs, a web terminal into the container, 48 h of metrics, and a per-service timeline that records OOM kills, restarts and config changes.
- Undo a bad deploy. Roll back to any previous release, config and environment included.
- Run many servers from one panel. Remote hosts join over SSH; deploys, logs and backups work the same on all of them.
- Hand it to an AI agent. An MCP endpoint with 35 annotated tools, through the same routers as the UI — so the org scope, capability checks and audit trail still apply. See what that looks like.
- Nothing is paywalled. SSO, teams, forward auth, audit export and white-labelling are in the box. There is no paid tier to upgrade to.
Install
curl -fsSL https://raw.githubusercontent.com/bablilayoub/nixploy/main/install.sh | sudo bash
With a domain (point DNS first):
NIXPLOY_DOMAIN=panel.example.com [email protected] \
curl -fsSL https://raw.githubusercontent.com/bablilayoub/nixploy/main/install.sh | sudo bash
Full installer options: docs/install.md. Update with update.sh.
Releases: github.com/bablilayoub/nixploy/releases — tag vX.Y.Z to publish the GHCR image, changelog, and version-pinned install/update scripts. How to cut a release: docs/releases.md.
Features
| Area | What you get |
|---|
| Deploy | GitHub / GitLab / Bitbucket / Gitea / generic Git, Docker images, zip · Nixpacks / Railpack / Dockerfile / buildpacks / static · BuildKit cache · PR previews (fork gate) · rollbacks |
| Data | Postgres, MySQL, MariaDB, MongoDB, Redis · DB backups to S3 · volume backups · instance self-backup (panel DB + config) |
| Compose | Native Compose / Swarm stacks with domains, logs, AI compose generate |
| Edge | Traefik v3 + Let's Encrypt / custom certs (DNS-01, expiry alerts) · redirects · basic-auth · any domain behind the panel login · TCP/UDP routes · traefik.me smoke hosts |
| Observe | Live logs & metrics (48h history) · web terminal · alert rules · uptime probes · incidents |
| Team | Orgs · roles (viewer→owner) · capability overlays · teams + per-project access · 2FA · passkeys (WebAuthn) · SSO (OIDC, group→role) · audit log + CSV export · quotas · white-label |
| Notify | Slack, Discord, Telegram, email, Gotify, ntfy, Pushover, Mattermost, Lark, Teams, webhooks |
| Automate | REST API + /swagger · @nixploy/cli (--wait returns a real outcome) · GitOps (nixploy.yaml) · MCP (POST /api/mcp, 35 annotated tools) |
| AI | Deploy Copilot — explain failures, confirm-gated chat, generate compose (BYO key) · llms.txt / agents.md / per-page Markdown |
| Infra | Remote Swarm servers · Docker control center · registries · schedules · in-app GHCR updates · doctor |
| Catalog | 146 one-click templates (15 categories), CI-checked image tags |
Product docs: nixploy.com/docs · API: nixploy.com/api
Screenshots
Architecture
A single Node.js process (Next.js with a custom server) plus two sibling containers on a single-node Docker Swarm:
┌──────────────────────── Host (Docker Swarm manager) ────────────────────────┐
│ │
│ ┌──────────────┐ ┌──────────────────┐ ┌────────────────────────┐ │
│ │ nixploy │ │ nixploy-postgres │ │ nixploy-traefik │ │
│ │ (Next.js : │───▶│ (PostgreSQL) │ │ (:80 / :443, ACME) │ │
│ │ 3000) │ └──────────────────┘ └───────────▲────────────┘ │
│ └──────┬───────┘ │ │
│ │ writes dynamic YAML ──▶ /etc/nixploy/traefik/dynamic/*.yml │
│ │ dockerode / ssh2 ─────▶ docker service create|update │
│ │ (user apps, databases, compose stacks) │
│ │
│ overlay network: nixploy-network │
└─────────────────────────────────────────────────────────────────────────────┘
Remote servers join the primary Swarm over SSH. Details: docs/architecture.md.
Quick start (local development)
Prerequisites: Node.js ≥ 22, pnpm ≥ 10, Docker (Swarm active: docker swarm init if needed).
pnpm install
docker run -d --name nixploy-dev-pg \
-e POSTGRES_USER=nixploy -e POSTGRES_PASSWORD=nixploy -e POSTGRES_DB=nixploy \
-p 54329:5432 postgres:17-alpine
cp apps/web/.env.example apps/web/.env
Set in apps/web/.env:
DATABASE_URL=postgres://nixploy:[email protected]:54329/nixploy
BETTER_AUTH_SECRET=$(openssl rand -hex 24) # paste the output
ENCRYPTION_KEY=$(openssl rand -hex 16)
BETTER_AUTH_URL=http://localhost:3000
pnpm db:migrate
cd apps/web && pnpm dev
Open http://localhost:3000/setup. Optional landing: cd apps/landing && pnpm dev → http://localhost:3001.
Full contributor guide: CONTRIBUTING.md · deeper setup: docs/development.md.
CLI & API
npm i -g @nixploy/cli
nixploy auth login --url http://localhost:3000 --api-key nxlp_...
nixploy doctor
REST paths are GET|POST /api/<router>.<procedure> with an x-api-key header. Interactive docs: /swagger on your panel. Guide: docs/api.md · nixploy.com/api.
Docs
Repository layout
| Path | Description |
|---|
apps/web | Next.js panel — UI, tRPC, REST/OpenAPI, custom server |
apps/landing | Marketing site (nixploy.com) |
apps/cli | @nixploy/cli |
packages/server | Schema, auth, deploy engine, Traefik/Docker utils |
docker/ | Production Dockerfile, Traefik config |
install.sh / update.sh | Production installer and updater |
License
Apache-2.0 — contributions welcome under the same license. See CONTRIBUTING.md.
