01Deploy
Anywhere
Alaf Server Cloud, your own VPS, a homelab - same workflow, your servers, your rules. Add more as you grow.
Deploy withoutthe complexity.
Alaf Server is the open-source platform that turns your servers into an automated cloud. Push code, deploy containers, and manage infrastructure.
Designed for your favorite stack
Next.js
Node
Python
Go
Rust
Docker
Postgres
Redis
Rails
Laravel
Django
BunNext.jsNodePythonGoRustDockerPostgresRedisRailsLaravelDjangoBun
Platform
Everything between your code and production
We handle the configuration, the builds, the certificates, the routing. You write the application.
02Backend
Full stack ready
Postgres, Redis, MongoDB, workers, mail, object storage - auto-provisioned, privately networked, observable.
03Git
Push to deploy
Connect a repo. Every push builds, runs your tests, and ships. Preview deployments per pull request.
04Safety
Instant rollbacks
Every deployment is an immutable snapshot. Revert to any previous version in one click, zero downtime.
05Stacks
Any language
Node, Python, Go, Rust, PHP, Ruby, Java, .NET, Elixir, Docker, monorepos - auto-detected and configured.
06Routing
Domains & SSL
Unlimited custom domains, wildcard certificates, automatic renewal. No add-ons, no caps, no metering.
How it works
From git push to live,
on your infrastructure.
No agent on your servers, no black box. Here's the exact path your code takes — and why your production machines never build.
- 01
Connect
Link a Git repo and pick a target — Alaf Server Cloud or your own server over SSH. Nothing is installed on your box: no agent, no daemon, no dashboard.
- 02
Build
On every push the image builds on your machine (or in the cloud), runs your tests, and is tagged as an immutable, versioned artifact. Your production servers stay focused on serving.
- 03
Ship
The built image streams to the target over SSH and starts as a fresh container on an isolated private network — no exposed ports, no hand-written Docker or Compose.
- 04
Route
Your domains are wired through OpenResty with automatic Let's Encrypt SSL, then traffic swaps to the new container with zero downtime. The previous version stays ready for rollback.
- 05
Operate
Stream logs, watch metrics, and roll back to any previous version in one click — from the CLI, the web dashboard, the desktop app, or an AI agent over MCP.
Where it runs
Cloud, self-hosted,
or both.
Same platform, three deployment shapes - and you can switch any day.
01Managed
Alaf Server Cloud
Sign up, point at a repository, ship. Zero infrastructure decisions. Multi-region by default. Auto-scaling per service.
- Multi-region edge - us, eu, apac, more
- Auto-scaling, zero-downtime rolling deploys
- Backups, monitoring, alerts included
From freePay only for compute and bandwidth
02Self-hosted
Your servers
Run the entire platform on machines you own. Any Linux box, any provider, any region. Add nodes as you grow.
- Connect any VPS - Hetzner, DO, AWS, bare metal
- Multi-server fan-out across regions
- No agent or dashboard on your boxes
Free, foreverOpen source, no usage caps, no telemetry
03Hybrid
Mix and match
Cloud for the burst, your servers for sensitive data. One control plane. Move workloads without rebuilding.
- Apps on your servers, services on the cloud
- Or production locally, previews managed
- One billing, one team, one dashboard
Pay per pieceOnly the managed services you use
Migrate any dayCloud ⇄ self-hosted.
Cloud ⇄ self-hosted.
One click, any time.
Your apps are plain containers and your services are standard images. Move workloads between Alaf Server Cloud and your own servers without rebuilding, rewriting, or paying an exit tax. Click, confirm, done.
The full platform
Forty-two capabilities,
one platform.
No add-on stores, no plugin marketplaces, no "requires an integration with...".
01
Deploy
6capabilitiesPush-to-deploy
Every commit builds and ships. Branch environments included.
Preview deployments
Every pull request gets its own URL. Auto-torn down on merge.
Local builds
Builds run on your machine. Production servers stay focused.
Auto-detected stacks
Framework, language, package manager, commands - figured out.
Smart fixes
Common failures (missing imports, version drift) diagnosed and patched.
Instant rollbacks
Every deploy is immutable. Revert to any version in one click.
02
Run
6capabilitiesAuto-scaling
Horizontal scaling per service. Up on traffic, down when idle.
Load balancing
Health checks, weighted routing, sticky sessions - built in.
Live monitoring
CPU, memory, network, disk - real-time charts and alerts.
Streaming logs
Live tail across services and replicas. Search, filter, persist.
Scheduled jobs
Cron-like jobs with retries, visibility, per-run logs.
Zero-downtime deploys
Rolling restarts, blue-green, draining connections - automatic.
03
Connect
6capabilitiesCustom domains
Unlimited apex and subdomains. Wildcards supported.
Free SSL
Let's Encrypt by default. Auto-renewing wildcard certificates.
DNS management
Visual records and propagation. Verify domains in seconds.
Edge routing
Global edge, anycast IPs, low-latency routing.
Private networking
Services talk over an isolated network, no exposed ports.
WebSockets
First-class support, persistent connections, sticky routing.
04
Services
6capabilitiesPostgreSQL
Versions 14–17. Daily backups, PITR, scheduled upgrades.
Redis
Cache or persistent. Cluster mode. Pub/sub and streams.
MongoDB & MySQL
Replica sets, sharding, automated upgrades, migration tools.
Object storage
S3-compatible buckets. Signed URLs, lifecycle rules, replication.
Mail server
Transactional from your domain. Authentication chain auto-configured.
CDN
Static asset acceleration. Cache invalidation on deploy.
05
Manage
6capabilitiesCLI
A single binary covering deploy, logs, secrets, domains, rollbacks.
Web dashboard
Visual deploys, metrics, billing, team access.
Desktop app
Native Mac and Windows. Push from local, stream logs natively.
MCP server
Drive deploys from AI agents — Claude, Cursor, any MCP client. Standard tools, authenticated.
Secrets vault
Encrypted at rest. Environment-scoped. Rotated without redeploying.
Audit log
Every action, exportable, retained for compliance.
06
Secure
6capabilitiesFirewall
Default-deny inbound. Per-service policies.
Rate limiting
Per-route limits, IP or token based. Burst and sustained.
Security headers
HSTS, CSP, COOP, COEP - production defaults.
DDoS protection
Edge-level mitigation, automatic challenge.
Encryption
TLS everywhere, encrypted backups, encrypted secrets.
Compliance-ready
Logs and config suitable for SOC 2, ISO 27001.
07
Collaborate
6capabilitiesWorkspaces
Multiple organizations per account — isolated projects, servers, and members. Switch in a click.
Team roles
Owner, admin, member, and a restricted role. Assigned per teammate.
Per-resource access
Grant access down to individual projects and resources - not just broad roles.
Restricted by default
The restricted role starts with zero access. Every permission is explicit - least privilege.
Invitations
Invite teammates by email. Expiring links, accept flow, per-inviter rate limits.
Member audit
Every join, role change, and removal recorded and exportable.
Built-in mail server
Transactional email,
unlimited domains.
Send password resets, receipts, magic links, marketing - from any domain you own. No Sendgrid bill. No DNS rabbit hole. One click and the records, certificates, and authentication chain are in place.
- 01One-click setup.SPF, DKIM, DMARC, reverse DNS - verified and configured for you.
- 02Unlimited domains.Add as many sending domains as you need. No add-on, no per-domain pricing.
- 03Real deliverability.Warm-up, reputation tracking, bounce handling, suppression lists - out of the box.
- 04Open SMTP & REST API.Plug straight in from your code. Webhooks for opens, clicks, bounces.
Ready to ship?
Start in our cloud or on a server you own.
No credit card, no lock-in, no configuration files.
- CLI, web & desktop
- Cloud or self-hosted
- No credit card
- Open source