Skip to main content
Free and open source

Your apps and your team’s tools, on servers you own.

LaraKube CLI provisions a hardened server on DigitalOcean, Hetzner, Google Cloud or AWS, deploys your apps to it, and installs 30 self-hosted tools with one command each. It writes plain Kubernetes manifests into your repo, so nothing is locked in.

Read the docsDeploy your first app

From a laptop to production in four commands​

The same blueprint runs on your machine and on your server, so what you test locally is what you deploy.

  1. 1

    Start locally

    Scaffold a project and run it on a local cluster with hot reload.

    larakube new
  2. 2

    Get a server

    Provision and harden a server on the cloud you choose, or bring your own.

    cloud:create
  3. 3

    Add your tools

    Install chat, a wiki, single sign-on or any of the 30 tools, with HTTPS included.

    sso:init
  4. 4

    Ship it

    Build the image, push it and roll it out. CI does the same on every merge.

    cloud:deploy

30 tools your team would otherwise rent per seat​

Each one is a mature open-source product. One command installs it with single sign-on, a certificate, DNS and backups already wired in.

Talk

Chat, calls and email on your own domain

  • Team chatMatrixchat:init
  • Video meetingsLiveKitmeet:init
  • Mail serverStalwartmail:init
  • WebmailBulwarkwebmail:init
  • Screen recordingSendrecrecord:init

Work

Where the team writes, plans and stores files

  • WikiOutlinenotes:init
  • Project boardsPlankatasks:init
  • File driveoCISdrive:init
  • Spreadsheet databaseTeablesheets:init
  • DesignPenpotdesign:init
  • Resume builderReactive Resumeresume:init

Sell

Customers, contracts and the numbers behind them

  • CRMTwentycrm:init
  • Customer supportChatwootsupport:init
  • Document signingDocumensosign:init
  • Short linksKuttlink:init
  • Web analyticsUmamianalytics:init
  • Business intelligenceMetabaseinsights:init

Secure

One login, shared secrets and a private network

  • Single sign-onZitadelsso:init
  • Password managerVaultwardenpasswords:init
  • Secrets managerOpenBaosecrets:init
  • Zero-trust VPNNetBirdvpn:init
  • Secure pasteYopasspaste:init

Build & run

Ship code and keep it healthy

  • Git & CI/CDForgejogit:init
  • Error trackingGlitchTiperrors:init
  • Status pagesUptime Kumauptime:init
  • MonitoringGrafana, Loki, Prometheusmonitor:init
  • Automationn8n or Windmillflow:init
  • Backend & CMSPocketBase or Directusdata:init
  • DNS automationExternalDNS + Cloudflaredns:init
  • Cluster dashboardHeadlampdashboard:init

Every tool follows one shape: larakube <tool>:init <environment>.How Cluster Tools work

Built on open-source projects you may already know

  • Matrix
  • LiveKit
  • Outline
  • ownCloud
  • Penpot
  • Reactive Resume
  • Twenty
  • Chatwoot
  • Umami
  • Metabase
  • Vaultwarden
  • OpenBao
  • Forgejo
  • Uptime Kuma
  • Grafana
  • n8n
  • PocketBase
  • Directus
  • and 12 more

Your own apps run beside them​

Laravel is where LaraKube CLI started. 7 frameworks deploy all the way to production today, and 8 more can be scaffolded.

Deploys to production

Scaffolds today, deployment in progress

Each app gets its own database, cache, search and object storage, on your laptop and in production.

Database

  • PostgreSQL
  • MySQL
  • MariaDB
  • MongoDB
  • SQLite

Cache · or your database

  • Valkey
  • Memcached

Search · or your database

  • Meilisearch
  • Typesense

Object storage

  • SeaweedFS
  • MinIO
  • Garage

Supported drivers vary by framework. Databases and services

Pick a cloud. Start with one server.​

A single hardened server runs everything above. When you outgrow it, move to managed Kubernetes with the same blueprint.

ProviderSingle server (k3s)Managed Kubernetes
DigitalOceanDropletDOKS
Hetzner CloudCloud serverNot offered
Google CloudCompute Engine VMGKE
Amazon Web ServicesEC2 instanceEKS
A server you already haveAny fresh VPS, over SSHNot offered

Provisioning with cloud:create

The parts people forget until 2 a.m.​

Security, certificates, backups and access control come with the server, not as a weekend project later.

  • Hardened on day one

    UFW firewall, fail2ban and key-only SSH, safe to re-apply any time.

    cloud:harden

  • HTTPS everywhere

    Let's Encrypt certificates, renewed through Cloudflare DNS so proxied hosts keep working.

    tls:init

  • DNS that follows you

    Records are created and cleaned up for every host you deploy.

    dns:init

  • Off-site, encrypted backups

    Nightly backups to any S3-compatible bucket, with a restore command you can rehearse.

    backup:init

  • Snapshots and rollback

    Snapshot a volume before a risky change, and roll back if it goes wrong.

    snapshot:create

  • Scales under load

    Pod autoscaling for web and worker processes.

    autoscale

  • Scoped team access

    Give a teammate their own kubeconfig, scoped to one environment and role.

    cluster:grant

  • Air-gapped installs

    Bundle images and manifests into one archive for servers with no internet.

    bundle:build

  • Works with AI agents

    Register the MCP server so your coding agent can inspect and operate the project.

    mcp:register

Read the security overview

Install it and ship something today​

Free, open source, and runs on macOS, Linux and Windows through WSL.

Help test what ships next. The canary channel is the tip of develop, rebuilt on every push. It replaces your stable install, so keep it for a spare machine or a project you can afford to break — then tell us what broke.