One binary. Your infrastructure. Your data.

Hezo is a single self-hosted binary with Postgres embedded - nothing else to stand up. Run it on a laptop, a home server, or your own cloud VPS, and point it at external Postgres or S3-compatible storage whenever you want. Everything your team produces stays on infrastructure you control.

Get started Read the docs

hezo - a single binary

Web appEmbedded PostgresEgress proxyAgent runner

One binary on your infrastructure - laptop, home server, or cloud VPS.

Batteries included, swappable when you grow.

Out of the box, data lives in the embedded Postgres inside your data directory. Point Hezo at an external Postgres or S3-compatible storage when you want to - migrations carry your data forward safely either way.

Embedded Postgres by default; external Postgres 14+ optional
Optional S3-compatible asset storage
Data-preserving migrations and built-in disk reclaim
Back up one directory and you've backed up everything

Deploy anywhere in minutes.

Run it on a laptop, a home server, or a cloud VM. One-click deploys cover GCP, AWS, and DigitalOcean; a systemd unit and reverse-proxy guide cover everything else. Updates install from inside the app.

GCPAWSDigitalOcean

Deployprovisioning · certificate · first bootlive on HTTPS

$ hezo install --systemd hezo.service - active (running)reverse proxy ready · TLS on 443firewall: 443 onlyworks with no internet at all

Your laptopencrypted tunnelYour box

TailscaleWireGuardCloudflare TunnelSSH

nothing needs to be open to the public internet

hezo v1.4.2v1.5.0 availabledownloading · verifying · swapping the binaryv1.5.0 running - restarted in place

One-click cloudGCP, AWS, and DigitalOcean buttons with HTTPS out of the box

Your own boxsystemd, reverse proxy, firewall guide - fully offline-friendly

Secure remote accessTailscale, WireGuard, Cloudflare Tunnel, or SSH

In-app updatesAuto-update when you want it, manual when you don't

One-click cloudGCP, AWS, and DigitalOcean buttons with HTTPS out of the box