Security
OpenBao Hosting
Manage secrets, encryption keys and access policies with OpenBao and its web interface. Deploy it in one click on Caliber Node — no compose file, no server to prepare, HTTPS working the moment it boots.
From $2.00/mo on the Nano subscription
$5.00 free credit when you sign up — your first 2 months of OpenBao, free
- One click
- Deploys in
- 512 MB
- Memory needed
- Not required
- Database
- $2.00/mo
- From
What you get
OpenBao runs on a subscription — a pool of CPU, memory and disk that you own. Deploying it takes one click, and the same pool will run your other apps at no extra charge.
A hostname with HTTPS, immediately
Your app is reachable the moment it finishes deploying, on a certificate we issue and renew. Point your own domain at it whenever you like.
Nothing exposed but the app
Only OpenBao itself gets a public port. Anything it depends on stays on a private network unreachable from the internet.
A shell and SFTP
A real shell in the container and SFTP for its files. This is not a black box — if you want to get in and look, you can.
Updates you control
We check nightly for a new image and tell you when one lands. Applying it is your decision, per app, and a failed update rolls back to the exact image it replaced.
A free snapshot
One full archive of OpenBao included, restorable in a click. Keep more with the snapshots add-on.
Your data, exportable
SFTP access to everything the app stores. Nothing here is locked in.
What actually runs
No mystery images. OpenBao deploys one container, and these are exactly the ones:
quay.io/openbao/openbao@sha256:6d2b93856e3fcf7b18ad855a0b51eaba474dc8b79cf554379ea32034797d2acfweb
Running OpenBao yourself vs. running it here
OpenBao is free software and you can absolutely run it yourself — we would rather tell you that than pretend otherwise. What you are paying for here is the part around it.
On your own server
- You write the compose file and keep it working
- You configure a reverse proxy and renew certificates
- You watch for new releases and apply them
- You own the backups, and finding out they were broken
On Caliber Node
- One click, and it is running on HTTPS
- Certificates issued and renewed for you
- Update checks nightly, applied when you say so
- A free snapshot, restorable in a click
Questions about OpenBao hosting
- Can I try OpenBao for free?
- Yes. Every new account gets $5.00 of Cloud Apps credit, applied automatically to your first invoice -- there is no code to enter and no card trial to cancel. On the plan OpenBao needs, that covers your first 2 months.
- How do I install OpenBao?
- Pick OpenBao from the catalog and deploy it. There is no compose file to write, no server to prepare and no reverse proxy to configure. It comes up on a hostname with HTTPS already working.
- What does hosting OpenBao cost?
- OpenBao needs at least 512 MB memory, so the Nano subscription at $2.00/mo is the smallest that fits it. That size is a close fit for OpenBao on its own -- if you want to run other apps alongside it, take the next plan up and share the pool.
- Do I get access to the OpenBao files and database?
- Yes. Every app has a browser shell into its container, SFTP for its files. Your data is yours and you can take it out whenever you want.
- Are updates to OpenBao automatic?
- Only if you turn them on. We check nightly for a new image and tell you when one exists, but applying it is your call, per app.
- Can I use my own domain for OpenBao?
- Yes. Every app gets a hostname on our domain immediately, and you can point your own domain at it instead. Certificates are issued and renewed automatically either way.
- Can I back OpenBao up?
- Every app includes one free snapshot -- a full archive of its data you can restore from. Keeping more than one is a paid add-on on the subscription.
More security apps
WireGuard Easy hosting
Create and manage a private WireGuard VPN through a simple protected web interface.
Authentik hosting
Single sign-on for your applications with OpenID Connect, SAML, MFA and a user directory.
AliasVault hosting
Encrypted password and identity manager. Shared-IP edition; receiving mail for your own alias domain is not supported.
Psono hosting
Community Edition encrypted password manager for individuals and teams, with a private PostgreSQL database.
Warpgate hosting
Control access to your own SSH, database and HTTP services through an authenticated gateway. Requires a dedicated IP.
AdGuard Home hosting
Block ads and trackers on your devices with a private DNS-over-HTTPS resolver and dashboard.
Deploy OpenBao in a click
OpenBao, running on resources you own, with HTTPS and a free snapshot included.