LoginSign Up
← Back to all sparks
D

Dokploy

INFRA · APIS
Velocity6.3

Self-hosted platform for deploying applications and databases

dokploy.com ↗

A self-hosted PaaS spending its releases on secrets, injection fixes and plan limits.

self-hosted-paassecrets-encryptionsecurity-hardeningplan-limitspostgres
◆Current state
Dokploy cuts patch releases every one to two weeks, and the recent stream is dominated by hardening rather than features. v0.29.12 added AES-256-GCM encryption for environment variables at rest and made backups carry the full keyring; v0.29.13 closed an OS command injection in git clone across all providers. The newest tag says outright that it is bug fixes only. Alongside that, plan limits landed in v0.29.10.
◆Where it's heading
The direction is a self-hosted platform trying to earn production trust: encrypted secrets, injection fixes, a pinned install script tied to each release, and Postgres query rewrites to stop hitting the 100-argument limit on rollbacks, schedules and backups. Plan limits point the other way — toward a commercial tier layered on the open-source core. Both arcs suggest the project is past feature-chasing and into making the platform defensible.
◆Prediction
Expect the hardening thread to continue into the rest of the 0.29 line, with the plan-limits work being the seed of a paid tier that gets more definition before a 0.30 release.

◆Recent moves

  1. 9h ago

    v0.29.14: fixes only, including Postgres argument-limit rewrites

    The release states it carries no new features. The substance is UI corrections plus rewrites that stop rollback, schedule, volume backup and port queries from hitting Postgres's 100-argument limit — a real ceiling for larger installs, fixed quietly.

    View source ↗
  2. 15d ago

    v0.29.13 closes an OS command injection in git clone

    An OS command injection in git clone across all providers is fixed, along with API key name validation that had been returning an opaque 500. Corrective security work in the same vein as the previous release's encryption additions.

    View source ↗
  3. 24d ago

    v0.29.12 encrypts environment variables at rest with AES-256-GCM

    ⚡ SPARK

    Environment variables are now encrypted at rest with AES-256-GCM, and backups export the full keyring alongside the encryption key file. For a platform whose whole job is holding other people's deployment secrets, this changes what workloads it is reasonable to run on it.

    View source ↗
  4. 28d ago

    v0.29.11 pins the install script to each release

    install.sh is attached to every GitHub release and pinned to that version, so a fresh install stops tracking a moving script. Bundled with crash fixes in the rebuild-database dialog and the command palette.

    View source ↗
  5. 1mo ago

    v0.29.10 introduces plan limits

    Plan limits arrive — the first structural hint of tiering in a stream otherwise made of fixes. It sits oddly against the hardening work, and together the two suggest a project preparing a commercial layer on a base it is busy making defensible.

    View source ↗