Free tier: 1 machine, 1 endpoint, 10 GB/month

Deploy to any machine. Get a public URL.

Nethera deploys your Docker Compose apps to a home server, GPU rig, or spare box, then hands you a public HTTPS endpoint. No static IP, no port forwarding, no router config.

nethera — bash
# On your target machine
$curl -fsSL https://get.nethera.io/agent | sudo sh

Three commands from a fresh box to a live public URL. That's the whole thing.

nethera.yml

If you know docker-compose.yml, you already know this.

Nethera is an extension, not a new thing to learn. Take your existing Compose file, add a nethera: block to the service you want reachable, and deploy.

  • The nethera: block turns a container port into a public endpoint, with auth, secrets, and config files all handled the same way.
  • Nothing about the rest of your Compose file changes. Images, volumes, environment variables all work exactly the way they already do.
nethera.yml
services:
comfyui:
image: comfyui/comfyui:latest
volumes:
- /mnt/nethera/models:/models
deploy:
resources:
reservations:
devices: [{ capabilities: [gpu] }]
 
# everything above is plain compose
nethera:
public: 8188 # bind public url to port 8188
auth: login # require log in to access
secrets: [HF_TOKEN] # injected at runtime

// scale

One machine, or a hundred. One CLI.

Start on one machine. Add more later, same nethera.yml, same neth deploy. Nethera routes traffic to whichever ones are healthy.

  • Every machine, one command

    Shows up in neth machine list. Choose targets with neth machine select, then deploy with the same command every time.

  • Traffic finds the healthy instances [Pro]

    One shared endpoint. No load balancer to stand up.

  • Cold cloud failover [Pro]

    Standby machine starts automatically if every backend goes dark, joins rotation once healthy.

neth machine list
$neth machine list
  • home-gpuhome·Ubuntu 24.04 - online
  • hetzner-cx32nbg1·Debian 12 - online
  • office-workstationlocal·Ubuntu 22.04 - online
  • raspi-4home·Raspberry Pi OS - offline
4 machines registered · 3 online

// security

Nothing exposed. Everything encrypted.

Nethera is built so your machine never needs an open port and your traffic is never in the clear.

  • End-to-end encryption

    All traffic runs over TLS and WireGuard, from your machine to Nethera's edge and out to the public request.

  • Choose how endpoints are protected

    Built-in OAuth login, API tokens, or fully public. Set per endpoint, change any time.

  • Secrets manager

    Set once with neth secrets set, injected at runtime, never stored in your compose file or your repo.

  • No inbound ports, ever

    Your machine only opens outbound connections. There is nothing for an attacker to scan or knock on.

// architecture

Agent deploys. Edge routes.

Nethera separates deployment from traffic. Your agent reconciles Compose on the machine, while requests enter through the edge and travel over WireGuard to your app.

Read the architecture guide
deploy control pathruntime request path
$neth deploy
$GET yourapp.nethera.io
Nethera Control Plane

Stores app specs and secrets

set up routing and auth
Nethera Edge

Picks a healthy backend

Your Machine
Nethera Agent

Runs docker compose

Docker Compose Application

Data stays on your machine

// pricing

Start free. Upgrade when you need more.

Try one machine for free, add another machine and unlimited endpoints on Plus, and move to per-machine pricing when you need a fleet.

Free

$0

One machine, one endpoint. Try it for free.

  • 1 machine
  • 1 endpoint
  • 1 user
  • 10 GB bandwidth/month
  • Nethera subdomain
Start free
Best start

Plus

$10/month

Two machines, unlimited apps. For personal infrastructure.

  • 2 machines
  • Unlimited endpoints
  • 1 admin user
  • 100 GB bandwidth/month
  • Nethera subdomains
  • Extra bandwidth: $0.12/GB
Upgrade to Plus

Pro

$39/machine/month

Private images, custom domains, teams. For business workloads.

  • Multiple machines
  • Unlimited endpoints
  • Unlimited users
  • 100 GB bandwidth/machine/month
  • Private images
  • Custom domains
  • Load balancing
  • Alerts
  • Cold cloud failover for stateless apps: AWS, Azure, and GCP
  • Priority support
  • Extra bandwidth: $0.12/GB
Upgrade to Pro