Servers in your account
Pick a machine type, location and image from the connection's catalog, with prices. The machine is created in your own Hetzner account.
Hetzner Cloud
KamalCloud builds servers in your Hetzner project, hardens them and runs Kamal against your repository. Hetzner bills you for the machines, at Hetzner's price.
Create a project in the Hetzner Cloud console.
Open Security, then API tokens, and generate one with Read & Write.
Paste it into KamalCloud. Nothing is created until you ask for it.
Pick a machine type, location and image from the connection's catalog, with prices. The machine is created in your own Hetzner account.
Firewall, SSH lockdown, fail2ban and unattended upgrades, read back off the server every time you open the page.
The official Kamal image runs against your repository from GitHub, GitLab, Gitea or Bitbucket. Deploy on a push to a branch or tag, once you turn it on.
Databases and volumes, scheduled, to buckets you control, with restore and download. Deleting an app, environment or server backs them up first.
Certificates issued and renewed, and DNS checked against what is actually resolving.
Spend estimated from the provider's own price list, per server, with idle resources flagged.
No. Servers are created in your own Hetzner account and Hetzner bills you for them, at its own price. KamalCloud never resells infrastructure.
Yes. Hetzner is the only provider that hands a root password back, which is how KamalCloud can put its key on a machine built before the keys existed. An app already running on it can be imported: KamalCloud reads it off the Docker containers and touches nothing on the machine.
The machine is destroyed at Hetzner, disk and all. Its databases and volumes are backed up first, and if a backup can't be taken, nothing is deleted. Disconnecting the project is different: it removes KamalCloud's record of the machines and destroys nothing.
Yes. Two Hetzner projects are two connections, with two keyrings and two sets of server names.
Paste a token, then build a server when you are ready. Nothing is created until you ask for it.
Sign-ups are paused while the app is in maintenance.