Self-hosted · docker-compose deployments

Deploy docker-compose projects on your own server — with SSL, out of the box.

kimbap is a lean, self-hosted deployment manager: it installs Docker if it isn't there yet, gives you a web UI to create and run docker-compose projects, fronts everything with an automatically-SSL'd Traefik reverse proxy, and lets Claude manage the whole host through MCP.

your server
$ curl -fsSL https://kimbap.example.com/install.sh | sudo bash
✓ kimbap installed and running → open the UI to create the first admin account

One binary, one systemd service. Docker and Traefik are one click away from there.

How it works

kimbap runs as a native systemd service — never as a Docker container itself — because it needs to be able to install Docker onto a host where Docker doesn't exist yet.

1

Install & log in

One install script sets up kimbap as a systemd service. Open its address and create the first admin account — the only unauthenticated action kimbap ever allows.

2

Docker & Traefik, one click

If Docker isn't installed, kimbap offers to install it (Docker's own official script, confirmation-gated). Then it provisions a managed Traefik instance with automatic Let's Encrypt SSL.

3

Deploy projects

Paste a docker-compose.yml, deploy it, and route a domain to it — kimbap wires up Traefik routing automatically. From the UI, the API, or a Claude conversation over MCP.

Your compose files stay yours. kimbap stores docker-compose.yml/.env directly on the filesystem, never hidden in a database, and never rewrites them — Traefik routing lives in a separate, clearly-marked generated override file.

Everything you'd expect — and you own it

One binary, one systemd service, no external dependencies beyond Docker and Traefik.

Automatic HTTPS

Every domain you route gets a Let's Encrypt certificate via kimbap's managed Traefik instance — no manual renewals.

Installs Docker for you

A brand-new host doesn't need Docker preinstalled — kimbap detects it's missing and offers to install it, confirmation-gated, never silent.

Small, real user management

Username/password accounts, admin/member roles, cookie sessions, and per-user API keys — argon2id hashing, rate-limited logins, no external identity provider needed.

MCP server built in

Point Claude Code or claude.ai at your kimbap instance as a remote connector — list, deploy, and manage projects, domains, and the host itself in conversation.

Your files stay yours

docker-compose.yml/.env live directly on disk, never rewritten by kimbap — inspect, back up, or git-track them independent of the app.

Self-hosted, fully

One embedded sqlite database, no external services. You hold the certificates, the data, and the host.

One static binary

Go backend, embedded React UI, no runtime dependencies. One command installs it and sets up a hardened systemd service.

Confirmation-gated actions

Installing Docker, provisioning Traefik, deleting a project — all require an explicit confirmation, whether that click comes from you or from Claude.

Ready to deploy on your own server?

The full installation guide lives in the docs — kimbap installs with a single command.

# on the server you want to deploy to
curl -fsSL https://kimbap.example.com/install.sh | sudo bash
sudo kimbap start