Self-hosted PaaS

A whole PaaS in one binary.

Girder builds, deploys, and keeps your apps running on your own servers. Databases, TLS, and backups included.

# on your laptop
$ girder apps create myapp
$ git remote add girder ssh://git@your-server:2222/myapp.git
$ git push girder main

remote: building myapp
remote: deploy healthy
remote: https://myapp.apps.example.com

The platform

Everything after git push.

The jobs a platform team would do for you, folded into a single Go binary.

Push to deploy

A pre-receive hook builds your app and streams the log back, so a failed build rejects the push. Healthy deploys roll out with zero downtime. Unhealthy ones roll back on their own.

git push girder main → live

Batteries included

Postgres, Redis, and S3 provisioned per app with one command. Credentials land in the environment on the next deploy.

girder services add myapp postgres

Real domains, real certs

Wildcard hosts work out of the box. Custom domains come with automatic DNS and Let's Encrypt, Cloudflare proxying when you want it.

myapp.apps.example.com

Backups you have tested

Nightly snapshots, per-database dumps, and point-in-time recovery. Restores land in a scratch database first; live data is never overwritten.

girder backup verify

Two ports open

Only 80 and 443 face the internet, and 80 is just there to redirect to HTTPS and keep crawlers happy. Git, admin, and databases sit behind Tailscale. Per-app networks and an encrypted secret store.

80 + 443 public · everything else private

Agent-native

An MCP server exposes the whole platform as tools, so your coding agent can create apps, wire up databases, map domains, roll back deploys, and run backups for you. Install the platform itself the same way: hand an agent the install skill and a fresh server.

girder-mcp · works with Claude, Cursor, and any MCP client

Up in an afternoon.

Install one binary on any Linux box with Docker, point a domain at it, and push. That is the whole setup.

Join the waitlist
# install on your server
$ curl -fsSL https://dl.rungirder.com/platform/install.sh | sh

# point your domain at it
$ girder config set appsDomain apps.example.com
$ girder dns sync 203.0.113.10

# ship your first app
$ girder apps create myapp
$ git remote add girder ssh://git@your-server:2222/myapp.git
$ git push girder main

The middle ground.

Hosted platforms meter every app you add. A bare VPS makes you the on-call. Girder sits between: your hardware, platform-grade automation.

Hosted PaaS Bare VPS Girder
Deploys git push, metered your own scripts git push, unmetered
Databases paid add-on per app you install and patch one command, included
Backups higher-tier feature your cron job nightly, verified, included
Domains and TLS automatic manual certbot automatic
The bill grows with every app cheap, paid in your time flat: hardware plus one license

Questions, answered.

How is Girder different from Coolify, Dokku, or Dokploy?

Those are free, open source, and good at what they do. Girder is a commercial product with a narrower promise: one static binary, a built-in git server, backups with real restore drills, and support from the people who wrote it. Fewer moving parts, and someone to email when one moves anyway. The full comparison lays it out.

Do I need Kubernetes?

No. Docker is the only runtime dependency. Girder is one binary running as one system service, on one server or several.

What servers does it run on?

Any Linux server with a public IPv4. Hetzner is the reference setup, and the installer can provision, patch, and scale nodes for you there, but any provider works.

Does my code leave my server?

No. Girder is the git origin: you push straight to it and the build runs on your hardware. There is no hosted control plane and nothing to phone home to.

What happens when my update year ends?

Nothing breaks. The software keeps running exactly as installed; you only stop receiving new versions until you renew.

Pricing

One server, one price, yours.

Buy it once and run it for as long as you like. Every license includes a year of updates.

Team

$349 once

  • Up to five servers, multi-node
  • One year of updates included
  • Priority support
  • Update renewal: $149 per year
Join the waitlist

Prices in USD. Launch pricing while Girder is in early access.

Get launch access.

Girder is in early access. Leave your email and you will hear from us the day licenses go on sale.

One email at launch, nothing else. Prefer direct? [email protected]