Skip to main content
You can self-host Infisical instead of using Infisical Cloud. This keeps your data on your own infrastructure and network.
Teams usually choose self-hosting for two reasons:
  • Compliance. Running Infisical inside your own environment lets it sit behind your existing security controls, which matters for SOC 2, HIPAA, and FIPS 140-3. All data stays under your governance.
  • Flexibility. You control the deployment topology. Infisical runs on air-gapped bare metal, Kubernetes clusters, and cloud VMs alike, so you can tune networking, security, and performance to fit.
Before you begin, check the hardware requirements for your expected load. If you need Enterprise features such as SSO or gateways, see Enterprise licensing.

​
Get started

Pick the platform you already run:

Docker

A single packaged container. The quickest way to get an instance running.

Docker Compose

Infisical, PostgreSQL, and Redis together from one template.

Kubernetes

Deploy with the official Helm chart, with bundled PostgreSQL and Redis.

Linux package

Install directly on a host, with no containers involved.

AWS

ECS with Fargate, backed by RDS, ElastiCache, and an ALB.

GCP

GKE, backed by Cloud SQL and Memorystore.

​
Configure

Apply settings once the instance is running:

Environment variables

Every variable the instance reads, and which ones are required.

Custom certificates

Trust an internal certificate authority or use your own TLS certificates.

HSM integration

Back the encryption root key with a hardware security module.

Programmatic provisioning

Set up an instance from scratch without touching the UI.

CDN caching

Serve static assets from a CDN to cut load times.

​
Operate

Keep the instance healthy once it’s carrying real traffic:

Server admin console

Instance-wide settings, user management, and sign-up controls.

Upgrade Infisical

Move to a newer version without losing data.

Multi-region replication

Run read replicas closer to the teams that use them.

Production hardening

What to lock down before you put an instance in front of a team.

Monitoring and telemetry

Collect metrics and traces with Grafana and OpenTelemetry.

Migrate Mongo to PostgreSQL

Move an instance from the older MongoDB backend.

​
Common questions

Answers to the questions that come up most often when running your own instance, including licensing, upgrades, and backups.

Self-hosting FAQ

Read the FAQ.