What is Rivet?
Rivet is an open-source, self-hosted PaaS for deploying Docker apps on a single VPS with automatic SSL, domain routing, encrypted secrets, auto-sleep, and monitoring.
Actively developing Rivet — APIs may change — Active development — Feedback welcome
Rivet is a self-hosted PaaS for a single VPS. Ship Dockerfile apps from your CLI or run public images from the console, with automatic SSL, routing, encrypted secrets, auto-sleep, and real-time monitoring.
Every deployed app gets HTTPS instantly. Let's Encrypt certificates are provisioned and renewed automatically — no nginx configs, no certbot crons, nothing to manage.
Point a project domain at your VPS and Rivet routes it through Caddy. Sleeping projects hit Rivet's wake handler first, then route back to the app container once it is running.
Idle containers sleep to free VPS memory and CPU. They wake on the first HTTP request — fast enough that users rarely notice. Ideal for staging and side projects.
Secrets are stored encrypted at rest and sent to Rivet over HTTPS. Set them in the
dashboard or import them from .env during
rivet ship; Rivet injects them securely at container
start.
CPU, memory, and network metrics for every container in real time. No Prometheus, no Grafana stack required — it's all surfaced in the Rivet dashboard.
A clean web dashboard on your Rivet domain for visual control, and a
rivet CLI for signup, signin, shipping, and deleting
projects. Use whichever fits your workflow.
One curl command starts Caddy, the Rivet API, and the web console on your Docker-ready VPS. The dashboard comes up on your Rivet domain.
Ship local Dockerfile apps with the CLI, or create console projects from public Docker images. Rivet starts the container, attaches it to the internal network, and routes traffic.
A Kubernetes-style loop continuously compares desired config against actual running containers and corrects any drift — automatically.
Rivet is intentionally not a giant platform. It doesn't try to be Heroku or Railway. It runs on a single VPS you already own and provides exactly the automation layer you're missing — without hiding what happens underneath.
Every container Rivet manages is a plain Docker container. Every certificate is a real Let's Encrypt cert. Secrets are stored encrypted and injected as env vars. SSH in any time.
No hosted platform meter running in the background. No runtime you can't inspect. Just your server, running your code, with platform-level conveniences on top.
Rivet is an open-source, self-hosted PaaS for deploying Docker apps on a single VPS with automatic SSL, domain routing, encrypted secrets, auto-sleep, and monitoring.
Yes, for developers who want the deployment workflow of a managed PaaS while keeping apps, data, and costs on infrastructure they own.
Rivet is designed for one Linux VPS. It manages Docker containers, Caddy routing, HTTPS certificates, secrets, and app state from that server.