Levelrail

Who it is for

• Side projects

  A cheap VPS and a git push, with TLS and rollback handled.

• Homelabs

  A server behind a home router works, because agents dial out.

• Agencies

  Many client apps on servers you control, without a per-seat platform bill.

• Internal tools

  Keep company apps on company hardware, behind your own domain.

• Self-hosted Next.js

  Leave a hosted platform for your own server and keep the deploy flow.

• Databases and backups

  One-click databases with backups to S3-compatible storage.

• AI agents

  Assistants can operate the platform through a read-only-by-default MCP server.

How a deploy flows

Walk it step by step, switch between one server, remote servers, load balanced and any cloud, and click any block for the detail.

The deploy

PushAny editor, any git host1BuildImage built beside the old one2Control planeOne binary decides3Roll outAgents dial out to your servers4Cut overTraffic moves when ready5AI assistGuarded by tokens6

Show the whole picture

One serverRemote serversLoad balancedAny cloud

Dashboardlevelrail.comtheAuth guard: token and permission checkReplica 1, new releaseMCP serverNew releaseAWS EC2Old release, kept for rollbackDockerWindsurfDockerRegion and zone aware placementAgent dials outCopilotAzure VMAgent dials outWireGuard mesh, betaCursorAutoscaling, betaVisitorsGoogle Compute EngineClaudeReplica 2Dashboard, API and CLIDigitalOcean DropletsHetzner CloudDockerOne-click templatesLevelrail control plane, one Go binaryAgent dials outlevelrail-cliIntelliJSQLite stateVS CodeBuild the imageGitLabIngress, TLS, firewallCloudflare DNS and TLSGitHubGiteaHTTP load balancer, experimentalBitbucketCircleCIJenkins

Setup 1, One server

One server runs everything

A fresh install runs entirely on the control plane's own local node.

Learn moreDocs

What you get

• Deploys and rollback

  Readiness-gated cutover, previews, scheduled deploys and a one-command rollback to the pinned previous image.

• Observability

  Per-app metrics and searchable logs that stay on the node that produced them.

• Networking

  Embedded Caddy for domains and TLS, plus a WireGuard mesh between nodes (beta).

• Templates

  A catalog of one-click self-host services across databases, CMSs, analytics and more.

• Security

  Envelope-encrypted secrets, mutual TLS agents, scoped tokens, policies and an audit log.

• Pipelines and CI

  Deploy an image from any CI, with OIDC on GitHub Actions so no secret is stored.

• Migrate in

  A read-only importer with a dry run for Coolify, Dokploy and CapRover.

• AI and MCP

  An MCP server with token-scoped tools. Write tools stay blocked until allow-write is set.

Where it stands

Levelrail is pre-1.0 and says so. These labels come from its own feature-status page, which ties each one to the tests and real-world runs behind it.

It is not a Kubernetes replacement: there is no bin-packing scheduler and no CRDs. It is free, Apache 2.0, and runs on servers you own. Read the full evidence table.