The simplest reliable deployment is a small Linux VPS running SilverBullet in Docker, with its /data directory on persistent local storage and Caddy providing HTTPS on a domain or subdomain. Enable authentication before opening the service to the internet, back up the mapped data directory and deployment secrets, and test a restore. SilverBullet also runs as a self-contained server binary, while managed hosting such as PikaPods removes most server administration.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What you are building
A VPS deployment places the SilverBullet server on a cloud virtual machine with a public IP address. You reach it at a hostname such as silverbullet.example.com. Caddy listens publicly on HTTPS, obtains and renews a Let’s Encrypt certificate, and forwards requests to SilverBullet on its local port. SilverBullet stores the application state and your Markdown space in a directory mounted at /data.
As an Amazon Associate I earn from qualifying purchases.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsThis arrangement separates four jobs:
- VPS: provides the CPU, memory, disk and public network address.
- SilverBullet: serves the notes application and manages the space directory.
- Reverse proxy: terminates TLS and forwards traffic to the local SilverBullet listener.
- Backups: preserve the space, configuration and secrets outside the running machine.
SilverBullet’s installation documentation says it can run on essentially any Intel-compatible 64-bit or ARM 64-bit machine to which you have terminal access. The same documentation says a few hundred megabytes of RAM is sufficient, so a low-resource VPS can be adequate for a personal space. Those are capability statements, not a capacity guarantee for unusually large spaces or many simultaneous users.
Choose between a VPS and managed hosting
Self-hosting gives you control over the operating system, SilverBullet version, network policy and backup destination. It also makes you responsible for patching the VPS, protecting credentials, monitoring disk usage and recovering from mistakes. A managed service trades some control and portability for less administration.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
| Consideration | Self-managed VPS | Managed SilverBullet hosting |
|---|---|---|
| Administration | You install and maintain the operating system, proxy, container or binary, firewall and updates. | The provider handles deployment and routine server work. |
| Backups | You choose the backup target, schedule, retention and restore process. | The provider documents backups, but you still need to understand retention and export options. |
| Network exposure | You control DNS, HTTPS, firewall rules and which ports are reachable. | The provider controls most of the network layer. |
| Upgrade control | You can pin and test a release before changing production. | Upgrades follow the provider’s process and schedule. |
| Portability | The Markdown space remains in your VPS directory and can be copied to another host. | You depend on the provider’s export and migration procedures. |
| Published price indication | The SilverBullet TLS guide previously cited about €3.5/month for Hetzner Cloud and about $2.5/month for Vultr; those figures are historical indications, not current quotes. | SilverBullet documentation previously described PikaPods at about $2/month; the amount is not a current guarantee. |
Use a VPS when you are comfortable administering Linux and want direct control. Choose managed hosting when reducing maintenance is more important than controlling the underlying machine. In either case, keep an independent copy of your Markdown space so a provider problem does not become a data-loss event.
Prerequisites before installing SilverBullet
- A Linux VPS with a public IPv4 address (and IPv6 if you intend to use it).
- Terminal access with permission to install Docker or execute a downloaded server binary.
- Persistent local disk space for the directory that will be mounted as
/data. - A domain or subdomain whose DNS can be pointed to the VPS.
- A plan for authentication, backups and updates before you expose the service publicly.
Use the VPS’s local disk for the primary space. SilverBullet assumes a case-sensitive file system, and its installation documentation warns that unreliable timestamp persistence on some NAS, synchronization or experimental file systems can create synchronization problems. Replicated backups are useful; an unusual network file system as the live data directory is a poor default.
Recommended Free Tools
Install with Docker
1. Install Docker and create a data directory
Install Docker using the package instructions for your VPS distribution, then create a directory that will survive container replacement. The official example uses a relative directory named ./data; an absolute path such as /opt/silverbullet/data makes its location clearer for backup jobs.
mkdir -p /opt/silverbullet/data
cd /opt/silverbulletEnsure the account running Docker can read and write this directory. Do not place the only copy of the space inside the container’s writable layer: replacing the container would then remove the data you meant to keep.
2. Start the container
SilverBullet’s documented container pattern publishes port 3000 and mounts the host data directory at /data:
docker run -d --restart unless-stopped
--name silverbullet
-p 3000:3000
-v ./data:/data
ghcr.io/silverbulletmd/silverbullet:latestThe -p 3000:3000 mapping makes the container’s port 3000 available on the VPS. The -v ./data:/data bind mount is the important persistence boundary: the files in the host directory are your application state and space. The --restart unless-stopped policy starts the container again after a reboot unless you intentionally stopped it.
latest is a moving image tag. It is convenient for initial setup, but it does not provide reproducible upgrades. For production, record the version you tested and replace the tag with a pinned release according to your update policy. Read the current SilverBullet release documentation before changing versions, and keep a backup made before the upgrade.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
3. Check the local service
Confirm that the container is running and inspect its logs before adding a proxy:
docker ps
docker logs --tail 100 silverbulletFrom the VPS itself, request the local port with a browser or an HTTP client. A local response proves that the container is listening; it does not prove that DNS, TLS or authentication are correctly configured. If the container exits, inspect the log output and verify that the mounted directory exists and is writable.
Run the self-contained server binary instead
Docker is not required. SilverBullet’s installation documentation also supports downloading and running its self-contained server binary on common Intel-compatible 64-bit and ARM 64-bit systems. Select the binary matching the VPS architecture, place it in a protected installation directory and run it under a dedicated service account. Configure its data location and listening port according to the current server documentation.
Free tools Windows power users keep installed
One-click scans. No signup required.
The binary approach removes the container layer and can fit a host that already has a service manager and a carefully managed filesystem. Docker makes replacement, rollback and isolation more familiar for many administrators. Whichever method you choose, the space must remain on persistent storage and the process must restart after an intentional reboot or failure.
Configure authentication before public access
Do not publish an unauthenticated SilverBullet instance. The configuration reference documents SB_USER for single-user credentials and SB_AUTH_TOKEN for bearer authentication to the HTTP API. It also documents SB_LOCKOUT_LIMIT and SB_LOCKOUT_TIME for failed-login lockout behavior. Choose a strong, unique password or the documented account setup before opening the firewall.
If you use environment variables with Docker, supply them when creating the container and keep the values out of shell history, public compose files and backups that are not encrypted. If you change authentication settings, recreate or restart the container using the same persistent data directory.
SB_PORT controls the listening port. SB_URL_PREFIX supports serving SilverBullet below a URL prefix rather than at the hostname root, but a dedicated subdomain is usually simpler because it avoids path-rewriting mistakes in the proxy.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
The HTTP API requires a valid session cookie or bearer token for authenticated endpoints. Only a small set of login, health and service-worker paths are excluded from authentication. Treat API tokens as passwords: limit their distribution, rotate them when exposed and do not place them in client-side snippets that others can read.
Why HTTPS is required for a public deployment
SilverBullet’s TLS guidance states that HTTPS enables the full feature set, including offline use and local encryption. Plain HTTP on a LAN IP or hostname works mostly in online-only mode, but it disables offline startup, cached file access, offline synchronization, local data encryption and OIDC/SSO. It also leaves credentials and note traffic open to interception or modification on the network.
Therefore, plain HTTP can be a temporary diagnostic path on a trusted private network, not the normal endpoint for a VPS with a public address. Put a TLS-terminating reverse proxy in front of SilverBullet and keep the application listener private where practical.
Point a domain at the VPS
1. Create DNS records
Choose a hostname such as silverbullet.example.com and create an A record pointing to the VPS’s public IPv4 address. Add an AAAA record only when the VPS and firewall are correctly configured for IPv6. DNS changes can take time to propagate, so verify that the hostname resolves to the intended machine before requesting a certificate.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11A free subdomain service such as DuckDNS is another possibility when you do not control a permanent domain. The important requirement is a stable hostname that resolves to the VPS and can be used by the certificate authority.
2. Install Caddy
Install Caddy using the package method recommended for your Linux distribution. Run it as a system service so it starts at boot and can renew certificates without manual intervention. Caddy must be able to bind to ports 80 and 443, and the VPS firewall must allow those ports from the internet for certificate issuance and normal HTTPS traffic.
3. Configure the reverse proxy
The documented Caddy pattern is:
silverbullet.example.com {
reverse_proxy localhost:3000
}Replace the hostname with your real DNS name. Caddy requests and installs a Let’s Encrypt certificate automatically when the hostname resolves to the VPS and the required ports are reachable. The proxy forwards requests to SilverBullet’s local port, so the public path is HTTPS while the application can remain bound to the local interface.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
After reloading Caddy, open the hostname in a browser and confirm the certificate name, lock icon and SilverBullet login page. Test from a network outside the VPS’s local LAN; a local test alone can hide DNS or firewall errors.
Keep SilverBullet off the public port where possible
The Docker example publishes port 3000 for straightforward testing. Once Caddy is working, restrict direct access to that port so internet clients use HTTPS and the proxy. A local-only binding, when supported by your chosen launch method, prevents remote connections to the application listener. If you retain a broad port mapping, enforce an equivalent firewall rule that allows the proxy path while denying unsolicited external traffic.
Expose only the services you need: normally SSH for administration and ports 80 and 443 for Caddy. Use key-based SSH authentication, disable unused accounts and keep the VPS operating system updated. These are host-level controls; SilverBullet authentication protects the application but does not replace them.
Back up the space and prove that restoration works
The host directory mounted to /data contains the persistent application and space data. Back up that directory together with the deployment configuration and any secrets required to recreate the service. A backup that contains Markdown but omits the configuration needed to start the service can still leave you with a difficult recovery.
- Stop or quiesce writes when your backup method requires a consistent snapshot.
- Copy the complete host directory mapped to
/datato storage separate from the VPS. - Save the Docker command or binary service definition, Caddy configuration, DNS details and authentication-secret procedure in a protected location.
- Encrypt backups that contain credentials or private notes and apply a retention policy with more than one historical copy.
- Periodically create a clean test environment, restore the directory, start SilverBullet and verify that representative pages, attachments and logins work.
Do not assume that a successful copy is a usable backup. Restoration testing catches wrong paths, missing permissions, stale secrets and file-system behavior that ordinary operation does not reveal. Keep the primary space on reliable local VPS storage and replicate copies elsewhere.
Updates, upgrades and routine administration
Before an upgrade
- Make and verify a fresh backup of
/data. - Record the currently running SilverBullet image or binary version.
- Read the current release notes and installation guidance for changes.
- Confirm that you can roll back to the previous image or binary.
Container update pattern
With Docker, stop and remove the old container without deleting the host directory, then create a new container using the tested tag and the same bind mount. Review logs and test login, editing, offline behavior and synchronization through the HTTPS hostname. Never remove /opt/silverbullet/data as part of routine container replacement.
Operational checks
- Watch free disk space; a full filesystem can prevent writes and backups.
- Review Caddy and SilverBullet logs for repeated authentication failures or proxy errors.
- Confirm that certificate renewal remains automatic after Caddy updates or firewall changes.
- Check that the VPS reboots into a running SilverBullet process and proxy.
- Run a restore test on a schedule rather than waiting for an emergency.
Troubleshoot common failures
The hostname does not open
Check DNS first: the A or AAAA record must point to the current VPS address. Then verify that ports 80 and 443 are allowed by both the VPS firewall and any provider-level firewall. If DNS is correct but the certificate is not issued, Caddy’s logs usually identify an unreachable port, incorrect hostname or rate-limit condition.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Caddy returns a gateway error
Confirm that SilverBullet is running and listening on port 3000. Check the container status and recent logs, then test the local listener from the VPS. A mismatch between Caddy’s reverse_proxy target and SilverBullet’s configured SB_PORT produces the same symptom.
The login page works but notes disappear after replacement
This normally indicates that the container was recreated without the original bind mount, or that the host path changed. Stop the service, identify the directory containing the previous space and recreate the deployment with that directory mounted at /data. Do not initialize a new empty space over the only copy before checking backups.
Offline features are missing
Verify that you are using the HTTPS hostname rather than a plain HTTP address. SilverBullet documents that offline startup, cached file access, offline synchronization and local data encryption are unavailable in its mostly online-only HTTP mode.
Synchronization behaves unpredictably
Move the live space to reliable local storage if it is on a NAS, synchronization share or experimental file system. SilverBullet warns that case-insensitivity and unreliable timestamp persistence can cause synchronization problems. Keep network or removable copies as backups, not as the primary working directory.
Repeated failed logins trigger lockout
Review the values of SB_LOCKOUT_LIMIT and SB_LOCKOUT_TIME, then ensure that a reverse proxy or monitoring system is not repeatedly submitting stale credentials. Rotate exposed passwords or API tokens and inspect logs before relaxing lockout behavior.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Security checklist before sharing the URL
- Authentication is enabled and tested with a strong, unique credential.
- The service is reachable through HTTPS with a valid certificate.
- HTTP is not being used as the normal public endpoint.
- SilverBullet’s application port is local-only or blocked from direct internet access.
- The VPS, Docker installation and Caddy package receive security updates.
- The
/datadirectory and recreation secrets have independent backups. - A restoration test has succeeded on a separate environment.
- DNS records and certificate renewal are monitored after address or firewall changes.
When managed hosting is the better answer
A managed SilverBullet host is reasonable when you want to write rather than administer a Linux server. PikaPods is documented as handling deployment, upgrades and backups, with a historical indication of about $2 per month and a statement that it contributes part of its revenue back to SilverBullet. Treat that amount and those terms as subject to change. Ask how to export the Markdown space, how long backups are retained, whether you can download them, and what happens if the service closes.
Managed hosting does not eliminate the need to understand authentication, HTTPS, data ownership and recovery. Before committing your only copy of a space, perform an export and confirm that the files can be opened independently of the provider.
Decision guide
| Your priority | Recommended approach |
|---|---|
| Fastest setup with minimal server work | Managed hosting, after confirming export and backup terms. |
| Control over versions, firewall and storage | Docker on a Linux VPS with Caddy. |
| No container runtime | Run the official self-contained server binary under a dedicated service account. |
| Private LAN experimentation | HTTP can be used temporarily in its online-only mode, without treating it as a secure public deployment. |
| Public access with offline and encryption features | Use a domain, Caddy-managed HTTPS and authentication before opening access. |
Final deployment sequence
- Provision the Linux VPS and secure administrative access.
- Point a domain or subdomain to its public IP address.
- Install Docker or download the matching SilverBullet server binary.
- Create persistent local storage and map it to
/data. - Enable authentication and configure lockout settings before public exposure.
- Start SilverBullet and verify it locally.
- Install Caddy, use
reverse_proxy localhost:3000, and allow automatic Let’s Encrypt issuance. - Restrict direct access to the application port and test the HTTPS hostname externally.
- Back up the space, configuration and secrets, then perform a restoration test.
- Document the tested version and repeat the backup-and-test cycle before upgrades.
This layout keeps SilverBullet’s portable Markdown space under your control while using standard VPS storage, a local application listener and an automatically renewed HTTPS endpoint. It is small enough for modest hardware, but it still requires the same discipline as any internet-facing service: authenticate first, encrypt traffic, patch the host and prove that backups restore.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
