Open source · Written in Rust · Self-hosted

Your server.
Your data.
No cloud.

One static binary. Git hosting, websites, email, photo libraries, calendars, contacts, DNS, and container registries — running on your own hardware, under your own control.

Get started Explore the docs

One binary

No runtime dependencies, no multi-service orchestration. A single static binary — run it directly or from the scratch container image — starts every service you enable: SSH, HTTP, SMTP, DNS, all of them.

Your data, your hardware

Nothing leaves your machine. No API keys, no cloud accounts, no subscriptions. Your repos, emails, photos, and contacts stay exactly where you put them.

Standard protocols

SSH, HTTP, SMTP, CalDAV, CardDAV, DNS, OCI. Every client you already use keeps working — you just stop pointing it at someone else’s server.

Enable what you need

Each backend is independent. Start with just Git hosting today. Add a site, a photo library, or an email inbox whenever you want — all from one process.

Everything your server needs

All services run in the same process. No glue code, no sidecar containers, no network hops between your own services.

Git SSH-backed repositories with per-repo access control and push-to-deploy workflows Websites Git-backed Markdown and static sites, served over HTTP with automatic TLS Email Inbound SMTP, outbound submission, and full IMAP access with rules-based routing Image library Photo and video hosting over HTTP with an Immich-compatible API for existing clients Calendars CalDAV server — sync with any standard calendar app on any device Contacts CardDAV server — sync with any standard contacts app on any device DNS Authoritative DNS server — manage zones for all your domains in one place Container registry OCI-compatible registry — push and pull your own images without Docker Hub

Up in a minute

Pull the multi-arch container image and start the server:

docker run -d --name everlock \
  -p 80:80 -p 443:443 -p 2222:2222 \
  -v everlock-data:/data \
  cr.everlock.sh/everlock:latest

The image is a single static binary on scratch, published multi-arch (amd64/arm64). On first run, Everlock bootstraps an admin account and prints the generated password to its log (docker logs everlock). From there, enable backends and create your first site or repository over the admin SSH console.

Full getting started guide