Free
One site or side project on a server you rent
$0for ever
- 1 server
- 3 apps
- 3 databases
- Just you
- 7 backups kept of each app
Your own server, without the server work.
Deploy websites, apps and databases to a server you rent. HTTPS, nightly backups and automatic restarts come with it, and nobody is handed the keys to your server.
Instruction№ 7F3A-91C2
actiondeploy an app
appshop
fromgithub.com/acme/shop
addressshop.yourname.com
Signed by 1ClickOps
Seal checked on your server
GitHub, GitLab, Bitbucket, Docker, PostgreSQL, MySQL, MariaDB, MongoDB, Redis, Cloudflare, Next.js, Node.js, Python, Go, Rust, PHP, Ruby, Java, Astro, SvelteKit, Nuxt, Vite, Remix
Hosting used to mean choosing. Hand a company your code and your keys, or learn to run a server yourself. 1ClickOps is the third way: your server, your data, and a dashboard that does the hard parts in one click.
From an empty server to a site that looks after itself
- 1
Connect your server
Paste one line into a fresh server. It checks itself, reports back, and appears in your dashboard. That is the only terminal you will see.
- 2
Pick what to run
A GitHub repository, one of 40 ready-made apps, or any Docker image. If your code needs a database, 1ClickOps notices and offers to create one.
- 3
Every instruction is sealed and checked
1ClickOps signs each instruction. Your server checks the seal, and the instruction itself, before it does anything. A signed instruction can still be refused.
- 4
It looks after itself
If a site stops answering it is restarted, and you get one email about the outage rather than one for every check.
- 5
One click back
Databases and files are copied every night. A restore is loaded into a spare copy first and swapped in only when all of it is there.
Connect
Deploy
Sealed
Stays up
Restore
Connect your server
Paste one line into a fresh server. It checks itself, reports back, and appears in your dashboard. That is the only terminal you will see.
Pick what to run
A GitHub repository, one of 40 ready-made apps, or any Docker image. If your code needs a database, 1ClickOps notices and offers to create one.
Every instruction is sealed and checked
1ClickOps signs each instruction. Your server checks the seal, and the instruction itself, before it does anything. A signed instruction can still be refused.
It looks after itself
If a site stops answering it is restarted, and you get one email about the outage rather than one for every check.
One click back
Databases and files are copied every night. A restore is loaded into a spare copy first and swapped in only when all of it is there.
A signed instruction can still be refused.
Your server does not simply trust 1ClickOps. The agent on it checks every instruction itself and refuses anything that could reach past your apps, whoever signed it.
0escape attempts, tested against the agent on every release
Take full control of the server
privileged: trueRefusedMount the server's root folder
volumes: ["/:/host"]RefusedRead the server's own settings
volumes: ["/etc:/etc"]RefusedTake over Docker itself
/var/run/docker.sockRefusedShare the server's network
network_mode: hostRefusedSee every process on the server
pid: hostRefusedGain extra kernel powers
cap_add: [SYS_ADMIN]RefusedReach the server's hardware
devices: ["/dev/kmsg"]RefusedSwitch off the sandbox filters
security_opt: [seccomp:unconfined]RefusedRead passwords from files on the server
env_file: /etc/…RefusedBorrow another app's data
external: trueRefusedPose as another app
name: victimRefused
Twelve of the 72, as the agent sees them. Each one is a real test: the same file is run through the real check in both versions of the agent.
The rest of the job, handled.
The things that usually take a weekend of reading, each one a click, and each one explained in plain words when it matters.
Copies, sized to your server
Run up to five copies of an app. 1ClickOps checks your server's free memory first, and only offers as many as will fit.
Try it first, then push it live
Changes land on a private copy. Push live ships the exact version you checked, after backing up the database.
40 ready-made apps
Ghost, n8n, Vaultwarden, Grafana, Uptime Kuma and more, pinned to tested versions, each with its own address.
Updates that never drop a visitor
The new version starts beside the old one and takes over only after it answers. If it doesn't, the old one keeps serving.
Your own domain, with HTTPS
Point a domain at your server and the certificate is taken care of. No files to edit, no renewals to remember.
Logs in plain words
When something breaks you read what happened and what to do next, not a wall of text. Developer mode still shows the raw lines.
How it compares
- Where your apps run
1ClickOps: On your server
Hosted platforms: In the platform's cloud
Self-hosted panels: On your server
- Keys to your server
1ClickOps: None held. Your server accepts only instructions it has checked
Hosted platforms: Not your server: you rent theirs
Self-hosted panels: The panel keeps an SSH key to each server
- Restoring a backup
1ClickOps: One click, loaded into a spare copy first
Hosted platforms: Depends on each database provider
Self-hosted panels: Depends on the service and how it was set up
- A terminal
1ClickOps: Once, to connect the server
Hosted platforms: Not needed
Self-hosted panels: To install and look after the panel
- What it costs to run
1ClickOps: A server you already pay a fixed price for
Hosted platforms: Grows with traffic and usage
Self-hosted panels: A server you already pay a fixed price for
Pay for scale, never for safety
You rent the server; the price here is for 1ClickOps. Backups, restores and every security check are on every plan. A limit only stops you adding more: nothing you already have is ever stopped.
Pro
A business that runs on its sites
$19a month
- 3 servers included, then $5 a month each
- Unlimited apps
- Unlimited databases
- Up to 3 people
- 14 backups kept of each app
- A staging copy of each app, and "Push live"
- A preview for every pull request
- Several copies of an app behind one address
- Alerts in Slack and Discord
Team
An agency or team looking after many servers
$49a month
- 10 servers included, then $4 a month each
- Unlimited apps
- Unlimited databases
- Unlimited people
- 30 backups kept of each app
- A staging copy of each app, and "Push live"
- A preview for every pull request
- Several copies of an app behind one address
- Alerts in Slack and Discord
On every plan, including Free
- Nightly backups on your server, and restore in one click
- Check that a backup is whole before you need it
- Off-site copies to your own storage
- HTTPS on every site
- Automatic restart when a site stops answering, and an email when it happens
- Go back to an earlier version
- Stop a deploy that is in progress
- Every security check on your server: signed instructions, the safety gate on every app
- 40 ready-made apps
- Deploy links and README badges for your repositories
What if 1ClickOps itself were hacked?
We plan for it. 1ClickOps never holds a key to your server, and the agent on your server checks every instruction itself, whoever signed it.
They could
- Deploy, restart or stop the apps 1ClickOps put on your server
- Run a command inside one of those apps
- Read the settings you typed into 1ClickOps. They are stored encrypted, but a full breach could read them
They could not
- Get a shell on your server, or log in to it
- Mount your server's disk or run anything with full privileges
- Touch software that 1ClickOps did not put there. The agent checks that every app is its own
- Push a changed agent to your server. Updates need a signature from a key that is never on 1ClickOps's servers
Taking over an app you added yourself sends you an email, so it cannot happen quietly.
Questions people ask
Do I need to know Linux or Docker?
No. You paste one line into a new server, once. After that everything is in the dashboard, and Guided mode explains what is happening in plain words.
What if 1ClickOps goes down?
Your sites keep running, because they live on your server. What pauses is deploying, and the checks and backups that 1ClickOps starts for you.
What happens if I stop paying, or go over a limit?
Nothing that is running stops. A limit only stops you adding more servers, apps or people; your sites, databases and backups keep going as they are, on your own server.
Can I leave?
Yes. Your apps are ordinary Docker containers on your server, so they keep running if you remove the agent.
Where are my backups?
On your own server. You can also copy them to a storage bucket of your own, and every backup says whether it has an off-site copy.
What can it run?
Node, Python, Go, Rust, PHP, Ruby, Java and static sites, with Next.js, SvelteKit, Nuxt, Astro, Vite and others detected for you. Or any Docker image, or one of the ready-made apps.
Which servers does it work on?
Ubuntu 22.04 or newer and Debian 12 or newer, on a normal Intel/AMD or ARM processor. That covers nearly every cloud server you can rent. Older Ubuntu (18.04, 20.04) and Debian (10, 11) work too, with a warning that they no longer get security updates. Rocky Linux, AlmaLinux, Oracle Linux and Red Hat Enterprise Linux 8 or newer, CentOS Stream 9 or newer, Amazon Linux 2023, Fedora, openSUSE, Arch Linux and Alpine also work, in beta: your sites and their HTTPS certificates are set up the same way, but they have been tried on fewer machines. Windows and Mac servers are not supported. On any other system the install command stops straight away and changes nothing.
Do I have to use GitHub?
No. GitLab, Bitbucket and Azure DevOps work too, and so does any public Docker image.