Deploy Everything.
Expose Nothing.
A terminal-native PaaS built in Rust. Zero-downtime deploys, no web UI attack surface, under 80 MB of RAM. Self-hosted infrastructure that stays out of the way.
Self-hosted PaaS, done right.
Most self-hosted platforms were built with convenience in mind. Voxeltron was built with production in mind.
Deploys cause downtime
Traefik restarts on every config change, dropping active connections. Voxeltron uses Cloudflare's Pingora proxy to hot-swap routes with zero interruption.
Web UIs are attack surface
Browser-based admin panels expose your infrastructure to XSS, CSRF, and framework CVEs. Voxeltron is terminal-native — gRPC only, no web server to exploit.
400 MB to manage containers
Node.js and PHP runtimes consume hundreds of megabytes just to idle. Voxeltron's Rust daemon uses under 80 MB and starts in milliseconds.
Built for engineers who ship to production.
Your entire infrastructure,
from the command line.
Deploy, rollback, scale, and rotate certificates without ever opening a browser. Built with Bubbletea for a rich TUI experience — vim-style navigation, live log tailing, sparkline metrics, and multiple themes. Access remotely over SSH.
Never drop a connection
during deployment.
Powered by Cloudflare's Pingora — the same proxy technology that handles trillions of requests. Routes are hot-swapped in memory without process restarts, meaning active connections are never interrupted.
Meet Crush — your
on-call AI operator.
An agentic AI assistant with 10 built-in tools, 4 skills, and 3 runbooks. Crush can investigate logs, analyze deployments, optimize costs, and auto-rollback failures — all with configurable permission levels and approval gates.
The facts speak for themselves.
| Feature | Voxeltron | Coolify | Dokploy | Kubernetes |
|---|---|---|---|---|
| Zero-downtime deploys | ✓ | ✗ | ✗ | ✓ |
| No web attack surface | ✓ | ✗ | ✗ | ✓ |
| Idle RAM usage | <80 MB | ~400 MB | ~300 MB | ~500 MB |
| AI DevOps agent | ✓ | ✗ | ✗ | ✗ |
| WASM plugin system | ✓ | ✗ | ✗ | ✓ |
| Setup complexity | One curl | Moderate | Moderate | Complex |
Production-grade from day one.
Managed Databases
PostgreSQL, MySQL, Redis, and MongoDB. Auto-provisioned with connection string injection and S3-compatible backups.
Real-Time Monitoring
Prometheus + Grafana integration. Live sparkline graphs for CPU, RAM, disk, and network right in your terminal.
WASM + JS Plugins
Sandboxed Rust/Go plugins via wasmtime. Hot-reloadable JavaScript plugins via Bun sidecar. Extend everything.
Automatic TLS
Let's Encrypt certificates with auto-renewal. HTTP-01 and DNS-01 challenges. HSTS and security headers enabled by default.
Encrypted Secrets
AES-256-GCM encryption at rest. HashiCorp Vault and OpenBao integration. No plaintext secrets in logs, ever.
Multi-Node Clustering
Raft consensus for leader election. Coordinator/agent architecture with automatic failover and deployment placement.
Git Push to Deploy
Zero-config builds with Railpack and Nixpacks. PR preview environments. Webhooks for GitHub, GitLab, and Gitea.
SSH Remote Access
Full TUI access over SSH via Wish framework. Manage your infrastructure from any machine with an SSH client.
Secure by Default
REST API disabled by default. gRPC-only management. IP-whitelisted access. Full audit logging for every admin action.
Voxeltron Cloud
A managed layer for teams who want web dashboards, mobile access, and collaborative infrastructure management — without giving up self-hosted control.
Ready to deploy?
Install Voxeltron in under 30 seconds. Open source, AGPL-3.0 licensed.