Everything your team needs to
deploy with confidence.
Every feature your team needs to deploy, secure, and scale — included in every Corelix plan.
Lock down access. Encrypt everything.
Fine-grained permissions, military-grade backup encryption, and network-level isolation — out of the box.
Granular Permissions
Project-level and environment-level access control with three permission tiers: View Only, Deploy, and Full Access. Visual Access Matrix UI lets admins manage permissions at a glance. Environment-level overrides let you restrict staging without touching production. Full REST API for automation. Owner/Admin roles bypass all checks.
FreeEncrypted S3 Backups
Per-storage NaCl SecretBox encryption using XSalsa20-Poly1305 — the same authenticated encryption used by Signal and WireGuard. Transparent encrypt-on-upload, decrypt-on-download via rclone crypt backend. Optional filename encryption hides file metadata on S3. Fully backward compatible — enable per storage, existing backups stay untouched.
FreeNetwork Isolation
Per-environment Docker bridge networks keep your staging and production workloads separated at the network layer. Dedicated proxy network prevents cross-environment traffic through the reverse proxy. Three isolation modes: none, environment, and strict. Docker Swarm overlay support with optional IPsec encryption for multi-node clusters.
FreeNever lose a deployment again.
Full resource backups with independent scheduling, plus expanded database support for 50+ additional images.
Resource Backups
Volume snapshots (tar.gz), configuration exports (JSON), and full backups for every application, database, and service. Each backup type runs on its own cron schedule with independent retention policies. Upload to S3 with optional encryption. Restore any resource to a previous state in one click.
FreeEnhanced Database Classification
50+ additional database images recognized out of the box — graph, vector, time-series, document, search, key-value, column-family, NewSQL, and OLAP. The coolify.database Docker label enables automatic classification. Wire-compatible backup support for YugabyteDB, TiDB, FerretDB, Percona, and Apache AGE. Expanded port mapping and multi-port proxy for databases with multiple endpoints.
From single server to multi-node cluster.
Manage clusters, registries, and template sources from a unified interface.
Cluster Management
Full Docker Swarm dashboard with node management — drain, activate, promote, demote — all from the UI. Service and task viewer shows real-time status across the cluster. Visual cluster topology map. Manage Swarm secrets and configs. Auto-detection links existing Swarm clusters. Built on a K8s-ready orchestrator abstraction layer.
ProDocker Registry Management
Centralized team-level management of Docker Hub, GHCR, GitLab, ECR, Quay, Azure ACR, and custom registries. Credentials auto-sync to servers via secure SSH — no manual docker login on each node. ECR token refresh handles AWS's 12-hour expiry automatically. Connection testing validates credentials before deployment.
Custom Template Sources
Point any GitHub repository as a template source and its services appear alongside Coolify's built-in library. Use the same docker-compose YAML format. Auto-sync keeps templates current. Filter the service catalog by source. Share internal service templates across your team without maintaining a fork.
FreeDNS Provider Management
Automatic DNS records and tunnel ingress for deployed resources. Cloudflare Tunnel driver with managed cloudflared, per-resource Domains panel, and wildcard routing. Pro depth adds multi-domain support, per-hostname routing, environment bindings, TCP records, drift sync, and Cloudflare Access policies.
FreeBuild faster. Deploy smarter.
AI-powered management, additional build systems, and a polished UI — tools that get out of your way.
MCP Server (AI Tools)
143 Model Context Protocol tools let AI assistants deploy, monitor, and manage your entire infrastructure via natural language. Works with Claude Desktop, Cursor, and VS Code. Core tools work with stock Coolify — enhanced tools unlock all Corelix features including DNS. Auto-detection configures the right tool set automatically.
FreeAdditional Build Types
Railpack, Heroku Buildpacks, and Paketo Buildpacks join Nixpacks, Dockerfile, Docker Compose, and Static as first-class build options. Railpack auto-detects your stack with zero config. Heroku and Paketo use the Cloud Native Buildpacks spec for production-ready OCI images. Choose the right builder for each project.
FreeEnhanced UI Theme
Multiple selectable themes for a polished look: Default (stock Coolify), Enhanced (Linear-inspired), and TailAdmin. Pure CSS — no JavaScript required for theming. Switch themes from Settings > Appearance. Self-hosted fonts for GDPR compliance. Each theme scopes to its own CSS variables for clean isolation.
FreeWhite-glove control for regulated teams.
Rebrand the entire platform, gate features by edition, and maintain a clean audit trail.
Traefik Label Overrides
Override or augment auto-generated Traefik labels per container in service templates and Docker Compose applications. YAML editor per container with user labels always winning. Customize path prefixes, middlewares, and routing rules without converting to raw compose.
ProWhitelabeling
Build-time brand replacement via Docker build arguments — every view shows your brand, not Coolify. Runtime URL overrides for documentation, support, and contact links via Settings > Branding. Custom logos, favicons, and OG images. Your clients see your platform, your identity, your brand.
ProFeature Flag Gating
Compile-time Free/Pro split from a single codebase. Central feature registry controls which features ship in each edition. Blade directives and route middleware make gating declarative. Disabled pro features show graceful upsell cards instead of broken pages. Automated build pipeline produces the free community edition.
FreeAudit Trail
Complete activity log for every deployment, configuration change, and permission modification. Track who did what, when, and from where. Export audit logs for compliance reporting. Filter by user, resource, or time range. Coming soon.
Pro · PlannedStart deploying in under 2 minutes
Sign up for Corelix Cloud and deploy your first app on European infrastructure. Upgrade to Pro when you need cluster management, whitelabeling, or registry management.