Nginx, Laravel Octane on FrankenPHP (or classic PHP-FPM), MariaDB or PostgreSQL, Valkey, Horizon, Reverb, auto SSL, firewall, backups, cipi.yml, a REST API — even an MCP server so your AI can talk to production. Blazing fast, hardened from minute one, effortless to run. Live on any Ubuntu VPS in about ten minutes. Free, open source, forever.
$ wget -O - https://cipi.sh/setup.sh | bash
Every app picks its engine with a single flag: Laravel Octane running on FrankenPHP keeps your application booted in memory and serves thousands of requests per second — or choose rock-solid PHP-FPM when classic is what you need. Behind it, MariaDB or PostgreSQL per app and Valkey serving cache, sessions, and queues straight from memory. Performance isn't a paid tier here. It's the install script.
Connect GitHub or GitLab once and Cipi handles the rest: deploy keys generated and injected, webhooks created, every app provisioned with its own Linux user, database, vhost, and PHP-FPM pool. Push to your branch and a signature-verified, zero-downtime deploy runs in the background — with one-command rollback if you ever need it. No CI/CD to maintain. No pipeline YAML to cry over.
Commit one file next to the app: domain aliases, PHP version and php.ini, extra databases, queue workers or Horizon, Laravel Reverb, the scheduler, a healthcheck, and backup profiles. Generate it from the server, inspect the plan, apply it — or opt in so every successful deploy reconciles. The schema carries no shell commands; an invalid file is rejected as a whole, never applied halfway.
Horizon or plain queue workers run under Supervisor and restart automatically on every deploy. Laravel Reverb pushes realtime websockets through Nginx with SSL. The scheduler is wired into cron the moment the app is created. Background jobs, broadcasts, and scheduled tasks aren't an afterthought — they're part of the provisioning.
The built-in MCP server connects Cursor, VS Code, or Claude Desktop straight to your live app over HTTPS. Ask questions in natural language: read logs, run SQL queries, execute artisan commands, trigger deploys. Destructive statements are blocked, no SSH session ever opens, and you never paste a stack trace into a chat window again.
SSH key-only authentication, Fail2ban with progressive banning, UFW firewall, unattended security upgrades, an AES-256 vault for every credential, GDPR-compliant log retention, and full Linux-user isolation per app. Email alerts fire on intrusion attempts, sudo elevations, SSH key changes, and failed deploys — while everything lands in a tamper-evident event log. Security isn't a feature you enable. It's the default you'd have to work to remove.
Code, database, .env, and storage — encrypted and shipped to any S3-compatible bucket on schedule.
Restore a database in one command, roll back a release in another. And when it's time to migrate or
recover, cipi sync clones apps,
databases, configs, and SSL certificates to a fresh server through a single AES-256 encrypted
transfer. Disaster recovery stops being a project and becomes a command.
The thirty-second version of everything Cipi does. Every card links to the full documentation when you're ready to go deeper.
A single script turns a fresh Ubuntu VPS into a complete production stack: Nginx, PHP 8.5, MariaDB or PostgreSQL, Valkey, Supervisor, Deployer, Certbot.
Deep diveServe each app on Laravel Octane powered by FrankenPHP for raw speed, or on classic battle-tested PHP-FPM. One flag per app, your call.
Deep diveMariaDB by default, PostgreSQL one command away. Pick the engine per app — .env and connection URLs follow automatically.
Deep diveA Redis-compatible in-memory store for cache, sessions, and queues — installed, secured, and wired into every app out of the box.
Deep diveLaravel Horizon watching your queues and Reverb websockets behind Nginx with SSL — provisioned and supervised for you.
Deep diveEvery app gets its own Linux user, database, Nginx vhost, PHP-FPM pool, and workers. One compromised app never touches another.
Deep diveDeployer-based atomic releases with symlink switching and one-command rollback. Your users never see a maintenance page.
Deep diveHMAC signature-verified webhooks trigger background deploys on every push. Branch filtering included, CI/CD pipeline not required.
Deep diveConfiguration that ships with the code: aliases, PHP, databases, workers, Reverb, scheduler, healthcheck and backups — planned, applied, or reconciled on every deploy.
Deep diveLet's Encrypt certificates installed and renewed automatically — wildcard domains supported. HTTPS is one command, then it's forever.
Deep diveCustom apps provision Nginx + PHP-FPM with a classic htdocs root — perfect for static sites, SPAs, WordPress, Symfony, or plain PHP. SFTP-ready.
Deep diveAdd a token once. Deploy keys and push webhooks are created on every app automatically — self-hosted GitLab included.
Deep diveEvery CLI command is also an HTTP endpoint. Token auth with fine-grained abilities, JSON responses, and async jobs with status polling.
Deep diveThe cipi-cli binary manages apps, SSL, deploys, and databases from your laptop — with multi-server profiles and a global status overview.
Deep divePrefer clicking to typing? One optional panel with 2FA drives all your servers from a single dashboard — a lightweight multi-server cockpit on top of the same API.
Deep diveSell hosting on top of Cipi. Customer orders in WHMCS, the module provisions, suspends, and terminates apps through the API automatically.
Deep diveOne composer require inside your Laravel app unlocks webhook deploys, health checks, MCP, and anonymization. Auto-discovered, zero config.
Deep diveSix tools let Cursor, VS Code, or Claude read logs, query the database, run artisan, and deploy — over HTTPS, with destructive SQL blocked.
Deep diveA JSON endpoint reporting PHP version, database, cache, queue, and disk vitals. Plug it into UptimeRobot, Pingdom, or your own monitors.
Deep diveConfigure SMTP once and get notified on deploy failures, backup errors, SSH intrusions, sudo elevations, and key changes. You sleep, Cipi watches.
Deep diveEvery deploy, ban, login, and lifecycle event lands in a single real-time log at /var/log/cipi/events.log — your server's black box.
Deep diveHorizon or plain queue workers under Supervisor, and the Laravel scheduler wired into cron — managed per app and restarted on every deploy.
Deep diveCompressed database dumps and restores in one command each. Schedule them in cron and forget mysqldump syntax forever.
Deep diveFull app backups — code, database, .env, storage — shipped to AWS S3, DO Spaces, MinIO, or Backblaze. With automatic pruning of old sets.
Deep diveClone apps, databases, configs, and SSL certificates to a replica server through one AES-256 encrypted SSH transfer. Migration made boring.
Deep divePer-table, per-column anonymization rules produce full database dumps with fake data replacing PII. Real structure, zero personal data.
Deep diveEvery credential Cipi creates — database passwords, tokens, root secrets — is encrypted at rest in a local vault. Nothing sits in plain text.
Deep diveSSH key-only auth, Fail2ban with progressive bans and a recidive jail, UFW firewall, and unattended security upgrades — from minute one.
Deep diveOne command to install.
One command to deploy. Zero lock-in, forever free, MIT licensed.
$ wget -O - https://cipi.sh/setup.sh | bash
