Skip to content

Introduction ​

Yomia is a self-hostable application platform. You run it on your own VPS or dedicated server; your users (or your team) deploy apps to it with a CLI — push a repo, get a URL.

It's the "platform-as-a-service" experience — build from source, managed databases, environment variables, custom domains, logs — but the servers are yours.

What you get ​

  • Deploys from a folder or Git repo. Yomia builds an OCI image with rootless BuildKit and runs it on the cluster.
  • Managed Postgres and persistent volumes, added per app with one command.
  • Encrypted, write-only environment variables with change history.
  • Automatic TLS for app subdomains and custom domains, via Let's Encrypt.
  • Per-tenant sandboxing. Every customer workload runs under a gVisor or Kata sandbox, with a locked-down pod security context and network policies isolating each workspace.

How it fits together ​

  • A control plane (API + operator) runs on a k3s cluster on your server.
  • The CLI talks to the API to create projects, trigger builds and manage apps.
  • Builds run as sandboxed, rootless jobs — optionally on dedicated build nodes — and push to a private registry.
  • Apps run as sandboxed pods, reachable through an ingress that terminates TLS.

Next steps ​

Released under the MIT License.