Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
VGSources
Blog

How to Self-Host Web Apps with Cloudron on an Ubuntu VPS

A complete guide to running Cloudron on Ubuntu: VPS requirements, installation commands, DNS, HTTPS, app trust, backups, security, capacity planning and trade-offs versus manual Docker.
Length11 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cloudron is the practical middle ground between a managed SaaS service and administering every container yourself. Install it on a fresh, supported Ubuntu VPS and it provides a web dashboard for deploying packaged applications, terminating HTTPS, routing subdomains, applying many updates, isolating apps with Docker, and scheduling per-app backups. You still own the server, DNS, credentials, storage planning, firewall policy and restore testing.

This guide covers the current installation workflow, realistic VPS sizing, DNS and TLS, app trust, backup boundaries, hardening, capacity planning and the situations where manual Docker Compose or a managed platform is a better fit.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Cloudron does on an Ubuntu VPS

Cloudron describes itself as “a platform that makes it easy to install, manage and secure web apps on your server.” Instead of assembling a reverse proxy, certificate automation, container definitions, update jobs and backup scripts for every application, you operate those functions from one control plane.

  • Application lifecycle: install supported packages, configure domains and update applications from the dashboard.
  • Ingress and HTTPS: Cloudron routes domains and obtains and renews certificates, avoiding most hand-written Nginx and Let’s Encrypt configuration.
  • Isolation: applications run in Docker-based isolation with per-app CPU and memory controls.
  • Data protection: configure app-level backup and restore and migrate an entire Cloudron to another provider.
  • Server ownership: you remain responsible for the VPS account, Ubuntu host, SSH access, domain registration, DNS, capacity, provider firewall and verification that backups can actually be restored.

The platform is not a general-purpose hosting shell. Cloudron’s network guidance says installing additional packages or running unrelated services on the server is unsupported unless current documentation explicitly allows the integration. Treat the VPS as dedicated Cloudron infrastructure.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Prerequisites and supported VPS requirements

Start with a new, x64 VPS. The current Cloudron installation documentation (2026) lists Ubuntu Resolute 26.04 x64, a minimum of 2 GB RAM, a minimum of 20 GB disk and unblocked TCP ports 80 and 443. Release names and minimums can change, so confirm the live requirements immediately before provisioning.

Requirement Current documented baseline What it means in practice
Operating system Ubuntu Resolute 26.04 x64 Use a fresh supported image; do not reuse a server with an existing web stack.
Architecture x64 ARM is not supported.
Memory At least 2 GB RAM An installation minimum, not a recommendation for several busy applications.
Disk At least 20 GB Include operating-system, Docker-image, app-data, backup and growth headroom.
Inbound ports 80 and 443 available Required for HTTP validation, web traffic and certificate issuance.
Unsupported virtualization or deployment models ARM, LXC, Docker and OpenVZ Choose a conventional supported VPS virtualization model instead.

Do not size a production server from the 2 GB and 20 GB figures alone. Cloudron documents that Docker images consume around 10 GB and that an individual app is typically around 2 GB for its image, with wide variation. It also maintains a dynamically resized /apps.swap file capped at 4 GB. App databases, uploads, logs, image layers, temporary files and retained backups can exceed those figures quickly.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A simple capacity plan

  • Reserve the documented baseline for Cloudron itself and Ubuntu.
  • Budget image space for every installed app; use the documented “around 2 GB” figure only as a rough starting point, not a guarantee.
  • Estimate persistent data separately: media libraries, file stores and databases often dominate disk use.
  • Leave free space for upgrades, temporary exports and filesystem recovery. A disk that is technically large enough on day one can become unserviceable after several image updates.
  • Keep backup storage outside the VPS. A second copy on the same root disk does not protect against disk loss or provider failure.

Provision and install Cloudron

Use a provider image that meets the requirements above, assign a stable public IPv4 address, and make sure reverse DNS and provider-level networking do not block web traffic. Do not install Docker, Nginx, a hosting panel or unrelated services first; the installer expects a clean machine.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
  1. Create the VPS. Select the supported x64 Ubuntu release, attach a disk sized for your app and data plan, and record the public IP address. Keep the provider’s recovery or console access available in case SSH configuration needs to be repaired.
  2. Connect over SSH. Log in with the provider’s initial account, update access credentials and confirm that you have administrative privileges. Cloudron’s own installer and firewall management require that level of access.
  3. Download the installer. Run the documented commands exactly:
    wget https://cloudron.io/cloudron-setup
    chmod +x cloudron-setup
    ./cloudron-setup
  4. Wait for provisioning. The script installs the Cloudron components and configures the host. Do not interrupt it or start competing services while it is running.
  5. Open the first-run interface. Browse to https://<IP>. The certificate is initially self-signed, so your browser will display a warning. Accept it temporarily to reach setup.
  6. Set the primary domain and administrator. Enter the domain you will use for the dashboard and create a strong, unique administrator credential. The normal dashboard is placed at my.example.com; individual apps commonly use subdomains such as git.example.com or chat.example.com.
  7. Finish DNS configuration. Choose a supported DNS provider integration or select wildcard/manual DNS and create the records yourself. Preserve existing records unless you have deliberately mapped them to this VPS.
  8. Harden access. Disable or restrict password-based SSH where practical, use key authentication, limit administrative users and configure the VPS provider firewall. Leave Cloudron free to manage its own iptables and ip6tables rules.

The installer is short; production readiness is not. A successful dashboard login only proves that the control plane started, not that DNS, certificates, backups, monitoring and recovery are ready.

Point a domain at Cloudron

Cloudron needs authoritative DNS that resolves your chosen domain to the VPS. The easiest path is a provider integration from Cloudron’s list, which can create records as applications are added. If you cannot use an integration, use manual DNS or a wildcard record.

Manual and wildcard DNS choices

  • Dashboard record: create an address record for the primary hostname, such as my.example.com, pointing to the VPS address.
  • Wildcard record: point *.example.com to the VPS when you want newly created app subdomains to resolve automatically. Keep the dashboard’s explicit record as well if your DNS provider requires it.
  • Existing services: leave mail, verification, API and other unrelated records untouched. Moving the zone or changing nameservers can break services that are not part of Cloudron.
  • Propagation: wait for resolvers to observe the new records before diagnosing an application as unreachable. A local cached answer can differ from an authoritative lookup.

Once a hostname resolves to the VPS, Cloudron’s reverse proxy can route it to the selected app and automate certificate issuance. Do not edit /etc/nginx manually; that configuration is platform-managed and manual changes can be overwritten or leave routing inconsistent.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Install applications and understand the trust model

The App Store is the default route. Select an app, choose its domain, review its storage and configuration options, and let Cloudron create the isolated service. Updates, logs, environment settings and backup controls then appear in the app’s dashboard entry.

Four ways to publish an app

Category Use case Operational boundary
App Store Supported packaged applications Best default for predictable installation, updates and backup integration.
Community app A package supplied through a developer’s CloudronVersions.json URL Cloudron does not review these packages. Install only from developers you trust and evaluate their maintenance history.
External link Expose a URL without hosting the application on this VPS Cloudron does not become the application’s update or backup system.
App proxy Publish an externally hosted HTTP(S) service behind a Cloudron-managed endpoint Cloudron can provide DNS, certificates, aliases, redirects, CSP and availability notifications, but the external app remains outside Cloudron’s update and backup control.

Community packaging is a supply-chain decision, not merely an installation shortcut. Check who publishes it, how releases are maintained and whether the package’s source and update process are understandable. A package appearing in a community feed is not an endorsement.

Backups, restores and storage boundaries

Cloudron supports per-app backup and restore and can migrate a complete Cloudron between providers. Its official materials name Amazon S3, Google Cloud Storage and DigitalOcean Spaces as external encrypted-backup destinations. Configure an external destination before placing valuable data on the server, then perform a restore test rather than assuming a successful upload equals recoverability.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

What is and is not included

An external app data directory is included in that app’s backup. Mounted volumes are not backed up. Restoring an application therefore does not recreate the contents of a mounted volume. This matters for media libraries, file stores and databases that were deliberately mounted from another path.

  • Inventory every mount and record its source path, owner, permissions and restore procedure.
  • Keep application data and mount data in separate recovery checklists.
  • Perform a test restore to an isolated hostname or recovery VPS and verify login, uploads, background jobs and database consistency.
  • Document retention, encryption access, destination credentials and who is responsible for approving a restore.

Managing a growing filesystem

Cloudron stores platform data under /home/yellowtent/boxdata and app data under /home/yellowtent/appsdata. If the root filesystem becomes constrained, use Cloudron’s supported volume or data-directory workflow to move high-storage app data to an external disk. Make a complete backup first and verify that the application is healthy after the move. Do not improvise by moving directories while containers are running or by editing internal paths that Cloudron manages.

Security and routine operations

Cloudron’s security model includes Docker isolation, automatic Ubuntu security updates and a platform designed to run backend and frontend code on the customer’s server without requiring a CDN or analytics service. Those defaults reduce routine work but do not remove the operator’s security duties.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Host and account checklist

  • Use a long, unique Cloudron administrator password and protect recovery credentials.
  • Prefer SSH keys, restrict SSH to trusted source addresses where possible, and remove unused accounts.
  • Enable the VPS provider firewall for only the traffic you need. Keep 80 and 443 reachable and allow your administration path.
  • Let Cloudron manage its own firewall rules. Do not directly edit the managed configuration unless following a current Cloudron procedure.
  • Monitor disk, memory, swap, CPU, certificate status, failed backups and application health.
  • Schedule maintenance windows for major app upgrades and retain an emergency console path.

Cloudron adds firewall ports as applications require them and blocks unneeded ports. A provider firewall and Cloudron’s firewall solve different layers of exposure; configure both without creating contradictory rules.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Cloudron versus managing containers yourself

The right choice depends on whether you value integrated defaults or unrestricted control. The following axes expose the practical trade-offs.

Decision axis Cloudron Manual Docker Compose Another control panel Managed app platform
Supported host model Specific supported Ubuntu x64 and VPS assumptions Depends on your own Docker and OS choices Varies by product Provider-defined runtime
Packaging App Store packages plus unreviewed community packages, links and proxies You write or obtain Compose files and images Panel-specific catalog Provider catalog or build pipeline
DNS and TLS Integrated domain routing and certificate automation You assemble and maintain proxy and certificate tooling May be integrated, with product-specific limits Usually integrated, but tied to the provider
Isolation and resource controls Docker isolation with per-app CPU and memory controls Available, but you configure limits and boundaries Depends on the panel Usually enforced by the platform
Updates and rollback App lifecycle is managed through the dashboard; behavior depends on package support You own image pinning, migrations, testing and rollback Panel-dependent Provider-dependent
Backups Per-app backup and restore, plus whole-Cloudron migration; mounted volumes excluded You define database, volume and off-site backup jobs Panel-dependent Often service-specific and export-dependent
Unrelated services Additional packages and services on the host are unsupported Flexible, subject to your administration and security discipline Varies Often prohibited or abstracted away
Portability Can migrate a complete Cloudron between providers High if images, data and configuration are portable Depends on export tooling May require provider-specific migration work
Operator workload Lower for standard app lifecycle tasks Highest control and highest responsibility Intermediate, product-dependent Lowest host maintenance, with less infrastructure control

Choose Cloudron when you want several conventional web apps on one VPS and prefer a consistent dashboard for certificates, domains, isolation, updates and backups. Choose Compose when you need arbitrary services, custom networking, unsupported images or complete control over deployment files. Choose a managed platform when avoiding server administration matters more than owning the underlying host.

Costs and provider selection

Your total cost has four parts: the VPS, the Cloudron subscription or plan applicable to your deployment, the domain and external backup storage. The amount you pay for any one component varies by provider, region, capacity and billing term, so obtain current figures at deployment time rather than relying on an old price.

Cloudron’s provider list includes AWS, DigitalOcean, Linode, LumaDock, Time4VPS and Vultr. Compare them on sustained RAM and CPU performance, expandable disk, snapshots, IPv4 availability, console recovery, firewall controls, traffic allowances, region and support response. Referral or affiliate terms can change and should be checked on the provider and Cloudron pages before purchase.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshooting common failures

The installer stops or the dashboard is unreachable

  • Confirm the VPS is a fresh supported x64 Ubuntu installation and not ARM, LXC, Docker or OpenVZ.
  • Check that ports 80 and 443 are open both in the provider firewall and in any upstream network policy.
  • Use the provider console to inspect the host if SSH was interrupted; do not install a competing web server as a workaround.

A hostname does not load or HTTPS is not issued

  • Verify the A or wildcard record resolves to the VPS’s current public IP from an external resolver.
  • Remove stale records that point the same hostname to another server, while preserving unrelated mail and verification records.
  • Ensure HTTP and HTTPS reach the VPS and that the domain is not being intercepted by a proxy or restrictive DNS setting.

An app runs out of disk

  • Inspect app data, Docker images, logs and backup retention rather than deleting files under Cloudron-managed directories manually.
  • Increase the VPS disk or move high-storage app data through the supported external-volume or data-directory workflow.
  • Check mounted volumes separately because their contents are not part of app backups.

A restore is incomplete

  • Determine whether missing content lived in a mounted volume; Cloudron does not recreate mounted-volume contents from an app backup.
  • Restore the corresponding external data from its own documented backup.
  • Repeat the test with the application’s database, uploads, permissions and background jobs, not just a successful container start.

A production-readiness checklist

  • Supported fresh Ubuntu x64 VPS with capacity beyond the 2 GB RAM and 20 GB disk installation minimums.
  • Stable public IP and provider console access.
  • DNS records for the dashboard and app domains, with existing records preserved.
  • Ports 80 and 443 reachable; provider firewall and Cloudron firewall rules understood.
  • SSH keys, restricted administration and unique Cloudron credentials.
  • External encrypted backup destination configured.
  • Mounts inventoried and excluded-content recovery documented.
  • At least one test restore completed on an isolated hostname or recovery server.
  • Monitoring for disk, memory, swap, certificates, failed backups and application health.
  • Decision made about whether every required service is supported by Cloudron’s app model.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.