Description
A VPS running a few sites turns, over time, into a pile of half-remembered manual steps: nginx configs scattered around, a certificate nobody renewed, a database password in some text file, and a cron entry you have to look up the syntax for again. Kubernetes is too much machinery for this, and managed platforms bill monthly. ServerKit sits in between — a control panel you install on your own server, putting sites, databases, Docker containers, domains and certificates, backups and firewall rules behind one web interface.
Deployment has several paths: connect a Git repository, pull a Docker image, point at a local path, or upload a zip. Build Packs inspect a repository with no Dockerfile and generate one along with a compose file. The built-in marketplace carries over a hundred one-click templates, and WordPress sites come up on real subdomains with wildcard HTTPS configured. Domains run through nginx virtual hosts with Let's Encrypt renewal, and DNS records can be managed directly on Cloudflare, Route 53 and DigitalOcean.
It also goes beyond one machine: a cross-platform Go agent for Linux, Windows and macOS talks over a real-time WebSocket gateway with HMAC-SHA256 auth, supporting fleet inventory, staged version rollouts, cross-server metric comparison and capacity forecasting. Python/Flask backend, React frontend, MIT licensed.
One-line install:
Any stack: one-click WordPress, Flask and Django on Gunicorn, Node.js on PM2, and static sites, sourced from Git, Docker, a manual path or an uploaded zip.
Build Packs: a repository without a Dockerfile is inspected and a build plan, Dockerfile and compose file are generated for it.
Docker management: image-update detection with one-click apply, auto-sleep for idle containers, CPU-driven autoscaling, live logs and terminal access.
Domains and SSL: nginx virtual hosts, automatic Let's Encrypt issuance and renewal, hardened TLS 1.2+ configuration, Cloudflare-aware configs and automatic CAA records.
DNS and cloud provisioning: full record management on Cloudflare, Route 53 and DigitalOcean with propagation checks and dynamic DNS, plus provisioning servers on DigitalOcean, Hetzner, Vultr and Linode with cost tracking.
Databases and files: MySQL/MariaDB and PostgreSQL with user management and a browser SQL console, a web file manager that browses S3/B2 buckets, vsftpd user management and a visual cron editor.
Backups: scheduled application, database and file backups to S3, B2 or local storage with retention policies, one-click restore and optional client-side encryption.
Security: per-app ModSecurity v3 with the OWASP Core Rule Set, ClamAV scanning with quarantine, file-integrity monitoring, Lynis audits, Fail2ban and SSH key management, plus grype CVE scanning and syft SBOMs for container images.
Access control: WebAuthn passwordless sign-in (hardware keys, Touch ID, Windows Hello) alongside TOTP, multi-tenant workspaces, admin/developer/viewer RBAC, SSO through Google, GitHub, OpenID Connect and SAML 2.0, and full audit logging.
Fleet management: the Go agent covers Linux, Windows and macOS with short-code pairing and fingerprint verification, feeding inventory, an approval queue, staged rollouts, an offline command queue, cross-server heatmaps and capacity forecasting.
Monitoring and alerts: CPU, RAM, disk and network over WebSocket with historical retention, NVIDIA GPU utilization down to per-process usage, public status pages with HTTP/TCP/DNS/Ping checks, and notifications via Discord, Slack, Telegram, email and webhooks with quiet hours.
Mail server: Postfix and Dovecot with DKIM/SPF/DMARC, SpamAssassin, Roundcube webmail and forwarding rules.
Lean by default: the setup wizard installs only the extensions your use cases need, with more available from the marketplace, sidebar presets for full, web hosting, email admin, DevOps or minimal views, and white-label branding.
Deployment has several paths: connect a Git repository, pull a Docker image, point at a local path, or upload a zip. Build Packs inspect a repository with no Dockerfile and generate one along with a compose file. The built-in marketplace carries over a hundred one-click templates, and WordPress sites come up on real subdomains with wildcard HTTPS configured. Domains run through nginx virtual hosts with Let's Encrypt renewal, and DNS records can be managed directly on Cloudflare, Route 53 and DigitalOcean.
It also goes beyond one machine: a cross-platform Go agent for Linux, Windows and macOS talks over a real-time WebSocket gateway with HMAC-SHA256 auth, supporting fleet inventory, staged version rollouts, cross-server metric comparison and capacity forecasting. Python/Flask backend, React frontend, MIT licensed.
Features
One-line install:
curl -fsSL https://serverkit.ai/install.sh | bash on Ubuntu 22.04+, Debian 12+, Fedora and RHEL/Rocky/AlmaLinux 9+, with a 1 vCPU / 1 GB RAM / 10 GB disk floor.Any stack: one-click WordPress, Flask and Django on Gunicorn, Node.js on PM2, and static sites, sourced from Git, Docker, a manual path or an uploaded zip.
Build Packs: a repository without a Dockerfile is inspected and a build plan, Dockerfile and compose file are generated for it.
Docker management: image-update detection with one-click apply, auto-sleep for idle containers, CPU-driven autoscaling, live logs and terminal access.
Domains and SSL: nginx virtual hosts, automatic Let's Encrypt issuance and renewal, hardened TLS 1.2+ configuration, Cloudflare-aware configs and automatic CAA records.
DNS and cloud provisioning: full record management on Cloudflare, Route 53 and DigitalOcean with propagation checks and dynamic DNS, plus provisioning servers on DigitalOcean, Hetzner, Vultr and Linode with cost tracking.
Databases and files: MySQL/MariaDB and PostgreSQL with user management and a browser SQL console, a web file manager that browses S3/B2 buckets, vsftpd user management and a visual cron editor.
Backups: scheduled application, database and file backups to S3, B2 or local storage with retention policies, one-click restore and optional client-side encryption.
Security: per-app ModSecurity v3 with the OWASP Core Rule Set, ClamAV scanning with quarantine, file-integrity monitoring, Lynis audits, Fail2ban and SSH key management, plus grype CVE scanning and syft SBOMs for container images.
Access control: WebAuthn passwordless sign-in (hardware keys, Touch ID, Windows Hello) alongside TOTP, multi-tenant workspaces, admin/developer/viewer RBAC, SSO through Google, GitHub, OpenID Connect and SAML 2.0, and full audit logging.
Fleet management: the Go agent covers Linux, Windows and macOS with short-code pairing and fingerprint verification, feeding inventory, an approval queue, staged rollouts, an offline command queue, cross-server heatmaps and capacity forecasting.
Monitoring and alerts: CPU, RAM, disk and network over WebSocket with historical retention, NVIDIA GPU utilization down to per-process usage, public status pages with HTTP/TCP/DNS/Ping checks, and notifications via Discord, Slack, Telegram, email and webhooks with quiet hours.
Mail server: Postfix and Dovecot with DKIM/SPF/DMARC, SpamAssassin, Roundcube webmail and forwarding rules.
Lean by default: the setup wizard installs only the extensions your use cases need, with more available from the marketplace, sidebar presets for full, web hosting, email admin, DevOps or minimal views, and white-label branding.
