dockxo
Sign in Create free account
FeaturesPricingBlogChangelogGet started Sign in

Deploy Docker apps to your own servers.

One dashboard for the servers you already rent: GitHub deploys, domains with TLS, databases, backups and monitors. Free while in beta.

Create free account How it works

One-click templates and the pieces underneath

PostgreSQLMariaDBMySQLRedisMongoDBRabbitMQMinIOMeilisearchNginxUptime KumaClickHouseWireGuard VPNAny Docker imageGitHub reposTraefik routingLet's EncryptCloudflare DNSNVIDIA GPUsClaude via MCPPostgreSQLMariaDBMySQLRedisMongoDBRabbitMQMinIOMeilisearchNginxUptime KumaClickHouseWireGuard VPNAny Docker imageGitHub reposTraefik routingLet's EncryptCloudflare DNSNVIDIA GPUsClaude via MCP

Three steps from a bare server to a URL with TLS.

No Kubernetes, no YAML, no SSH keys. The panel keeps the configuration; an agent on each server does the work.

  1. Connect

    Paste one command on your server

    Docker is installed if missing. The agent starts, opens an outbound WebSocket to the panel and brings up a Traefik proxy. Nothing listens on the server.

    #curl -fsSL https://panel.dockxo.com/install/… | sh
  2. Deploy

    Point at a repo, an image or a template

    Pick a GitHub branch with push-to-deploy, any Docker image, an inline Dockerfile, or a one-click Postgres, Redis or MariaDB. Env is encrypted and injected.

    →northwind/shop-api main, rolling, auto-deploy
  3. Route

    Add a domain, get a certificate

    Free subdomain instantly, your own domain with Let's Encrypt in seconds. Cloudflare records can be created for you and follow the service if it moves.

    ✓https://api.northwind.dev TLS, HTTP to HTTPS

Your servers dial out. The panel never dials in.

Each server runs a small agent that connects to the panel over an outbound WebSocket and controls Docker locally. It works behind NAT, needs no open port and no SSH access. Mark a server private and its IP never appears in DNS.

browser you dockxo panel Fastify + React MariaDB · jobs · webhooks panel.dockxo.com HTTPS server A dockxo-agent → docker.sock → traefik :80 :443 api · web · db · redis server B dockxo-agent → docker.sock → traefik :80 :443 db-replica · worker · lb server C (private) dockxo-agent → docker.sock → traefik :8099 no public DNS · load-balancer member outbound WebSocket no inbound ports · no SSH

Rolling deploys with a real port check

The new container starts next to the old one, has to answer on its port, then routes switch and the old one is removed. A failed container is cleaned up, not left lingering. Every build streams live and can be cancelled.

  • GitHub with push-to-deploy webhooks, monorepo build paths, Dockerfile path
  • Docker layer cache survives between deploys; rebuild without cache on demand
  • Deploy history with commit message, sha and duration
  • Write env as a .env file into the build for Laravel, dotenv and friends
Deploys in depthHow rolling works
Deploying api #128rolling
$ git clone --depth 1 -b main github.com/northwind/shop-api
#5 [3/6] COPY package*.json ./
#6 [4/6] RUN npm ci --omit=dev CACHED
#8 exporting image sha256:9b1c…e3
built in 14.2s
starting api-a41f2c on shop network
waiting for :3000 … 1.8s
port check passed
routes updated on hetzner-fsn-1
removed api-77e0b1, zero downtime

Managed MariaDB with replicas and a router

A database kind with its own wizard, users and grants, dump import and tunables. Add read-only replicas on other servers, promote one with a click, and put a MaxScale router in front for read/write split and automatic failover.

  • Health checked every minute; Telegram or email alert when replication stops or lag grows
  • Managed Redis, MongoDB and Meilisearch too, with copy from another instance
  • A stable DNS name per database that follows the server it runs on
Managed databasesDesign notes
shop / db primary
apps → router:3306→ db, primary, fsn-1 db-replica, lag 0.2s, nbg-1 db-replica-2, lag 0.4s, hel-1
statusrunning, 214 of 500 connections replication2 replicas, GTID 0-1-8812 routermaxscale, rw-split, failover auto last backup04:00, 1.9 GB, r2://northwind-backups alertstelegram #ops, [email protected]

Everything you would otherwise bolt on by hand.

Load balancing across servers, backups to your own bucket and monitors with alerts are first-class services in the same panel, not scripts on a forgotten server.

One domain, many servers

A load balancer is a service of its own: one domain in front of the same service on any of your servers. Health checks, sticky sessions that reach the exact container, and members that only expose the domain to the balancer.

Load balancer
shop.northwind.dev 3 members, sticky
web on hetzner-fsn-141 ms, 34%
web on hetzner-nbg-138 ms, 33%
web on ovh-gra-2 private57 ms, 33%
requests per minute, last 30 minutes, from the proxy access log

Backups to your bucket

Plans with a cron schedule and retention, streamed from the server straight to S3, R2, B2, Wasabi, Hetzner or MinIO. Every run carries a sealed project file, so a bucket alone can rebuild the project on a new panel.

Backups and restore
shop daily 04:00, keep 14
Sep 26, 04:0014.2 GB, 3m 41s
Sep 25, 04:0014.1 GB, 3m 39s
r2://northwind-backups/shop/sealed

Monitors and alerts

Uptime checks every 20 seconds to an hour with response time and incidents. A Telegram message or an email says why a site is down and when it is back. Services report failed deploys and crashed containers too.

Monitors and alerts
Monitors 11 up, 1 down
api.northwind.dev82 ms
legacy.northwind.devdown 4m, HTTP 502
Telegram #ops, mail [email protected]
legacy.northwind.dev is DOWN: HTTP 502 after 3 failed checks

Ask Claude. Get paged on your phone. Sign in without a password.

dockxo 1.0 is out, and the 1.x releases bring the panel to where you are: in your AI assistant, on your home screen, behind a passkey.

Claude, connected to your servers

dockxo is an MCP server. Add it as a connector, choose read only, read + deploy or full access, and ask: why a site returns 503, which certificates expire, which databases are open to the internet. It reads the logs, the deploys and the health checks for you, and asks before it changes anything.

Claude & MCP
Claude dockxo, read + deploy
> Why does api.shop return 503?
get_service api.shop · service_health · get_service_logs (300)
list_deployments · get_server hetzner-fsn-1
The load balancer marks both members unhealthy: the health check gets no answer in 4 s.
Logs show every request waiting on redis.shop: DNS lookups take 5-10 s.
Fix: restart api.shop after the resolver change. Shall I?

An app with push alerts

Install dockxo on your phone and computer from the browser. Monitors and service alerts arrive as notifications, even with the panel closed, and a tap opens the page they are about.

App and push
Notifications 2 devices
legacy.northwind.dev is DOWNnow
api: deploy failed (#129)4m
shop.northwind.dev is up1h

Passkeys and SSH keys

Sign in with Face ID, Touch ID, Windows Hello or a password manager, or sign a line with your SSH key. Then turn the password off, so a phished one opens nothing.

Security & API
Sign-in password off
MacBook, iPhonepasskeys, synced
ed25519 SHA256:F3jO…SSH key

Eighteen things the panel does for you.

Each one has its own page with the details. All of it is included during the beta.

Deploy

Route

Data

Operate

Panel

Free while in beta. All of it.

$0a month, during the beta

No plan tiers, no server cap, no card. When paid plans arrive we will say so 30 days ahead, and beta accounts keep their projects.

Create free accountPricing details
  • Unlimited servers
  • Unlimited projects and services
  • Unlimited domains with TLS
  • Free subdomains per server
  • Managed MariaDB, Redis, MongoDB, Meilisearch
  • Load balancers and cache proxies
  • Backups to your own bucket
  • Monitors with Telegram and email alerts
  • Logs, terminal, file manager
  • Full API and restore CLI
  • Two-factor auth and security notices
  • Email support from the makers

Questions people ask before adding their first server.

Is it really free?
Yes. While dockxo is in beta every feature is available with no plan limits and no card. When paid plans arrive we will announce them at least 30 days ahead, and beta accounts keep their projects. See the beta terms.
Where do my apps run?
On your own servers. dockxo is the control panel; a small agent on each server does the work. Your containers, volumes and backups never leave machines and buckets you control.
What does the agent need?
A fresh Ubuntu 22.04+ or Debian 12+ server and root for the install command. It installs Docker if missing, runs as a container with docker.sock, and only makes an outbound WebSocket connection to the panel. No inbound port, no SSH.
Can I use my own domain and Cloudflare?
Yes. Add any number of domains per service; certificates come from Let's Encrypt on the server. With a Cloudflare token the panel creates and updates A records for you, and records follow a service when it moves.
Does it lock me in?
No. Everything is a plain Docker container, a plain Traefik configuration and a plain volume on your server. Backups are tarballs and SQL dumps in your own bucket, next to a sealed file with the project's configuration.
Can I script it?
Everything the panel does goes through the same HTTP API with personal tokens, each read only, read + deploy or full access: deploy (and wait for the result), set env keys, add domains, move services, follow jobs, read logs.
Can Claude or another AI assistant use it?
Yes. dockxo is an MCP server: add https://panel.dockxo.com/mcp as a connector in Claude (or Claude Code, Cursor, VS Code), approve read only, read + deploy or full access, and ask in plain words. It never deletes anything and secrets stay masked. How it works.
Is there a mobile app?
dockxo installs as an app on iPhone, Android and desktop straight from the browser, with push notifications for monitors and service alerts. App and push notifications.
How does it compare to Virtuozzo Application Platform (Jelastic)?
Virtuozzo is a PaaS you license per cluster (from $192 a month for 64 GB of RAM, plus an installation fee and several infrastructure nodes) or rent by the cloudlet from a hosting provider. dockxo runs on the plain VPSes you already have and is free during the beta. Read the full comparison.

How it is built, and how to use it well.

Oct 22, 2026

dockxo 1.2: Claude, an app on your phone, and sign-in without a password

dockxo reached 1.0, then became an app with push alerts and an MCP server for Claude. Plus passkeys and SSH keys, a page for every open port and certificate, GPUs and ClickHouse.

 Sep 27, 2026

dockxo vs Virtuozzo Application Platform (Jelastic): a PaaS on your own VPSes, without the licence

Virtuozzo Application Platform, formerly Jelastic, is licensed per cluster from $192 a month and needs a rack of infrastructure nodes before the first app runs. dockxo does the everyday PaaS jobs on the servers you already rent, free during the beta. A fair, numbers-first comparison.

 Sep 26, 2026

Introducing dockxo: deploy to your own servers, free and unlimited during the beta

dockxo is a deployment panel for people who own their servers. Today it opens as a public beta: every feature, every limit off, no card.

All posts

Your servers deserve a better dashboard.

Create an account, paste one command on a server, and deploy something in the next five minutes.

Create free account Sign in