Skip to content

Self-hosting

NetRoll ships as one container image — a single binary serving the built SPA — plus a Postgres database. Nothing in it requires infrastructure operated by N1CCK: no tailnet, no 1Password, no particular host.

Get started

Guides

Learn more

  • Deployment model — what's in the image, what state exists, and what the app does at boot.

Reference

What you're responsible for

Concern Handled by NetRoll Handled by you
Schema migrations Yes — applied at boot —
TLS and the public hostname No Your reverse proxy
Outgoing email Sends via SMTP Supplying a working relay and a sender domain
Backups No Postgres dumps and the avatar volume
Exposure control No Your firewall and proxy