
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
English | Türkçe
Self-hosting made simple.
Deploy, secure, back up, snapshot, and maintain your servers with confidence.
Most self-hosted Coolify servers break because:
Stop babysitting your Coolify server. Quicklify was built to fix that.
# 1. Get your API token from Hetzner, DigitalOcean, Vultr, or Linode
# 2. Run the installer
npx quicklify init
# 3. Access Coolify at http://<your-ip>:8000
That's it. Quicklify handles server provisioning, SSH key setup, firewall configuration, and Coolify installation automatically.
| Problem | Solution |
|---|---|
| Broke your server with an update? | Pre-update snapshot protection via maintain |
| No idea if your server is healthy? | Built-in monitoring, health checks, and doctor diagnostics |
| Security is an afterthought? | Firewall, SSH hardening, SSL, and security audits built-in |
| Backups? Maybe someday... | One-command backup & restore with manifest tracking |
| Managing multiple servers? | --all flag across backup, maintain, status, and health |
| Existing server not tracked? | quicklify add brings any Coolify server under management |
quicklify init # Interactive setup
quicklify init --provider hetzner # Non-interactive
quicklify init --config quicklify.yml # From YAML config
quicklify init --template production # Use a template
quicklify list # List all servers
quicklify status my-server # Check server & Coolify status
quicklify status --all # Check all servers
quicklify ssh my-server # SSH into server
quicklify restart my-server # Restart server
quicklify destroy my-server # Destroy cloud server entirely
quicklify add # Add existing Coolify server
quicklify remove my-server # Remove from local config
quicklify config set key value # Manage default configuration
quicklify export # Export server list to JSON
quicklify import servers.json # Import servers from JSON
quicklify update my-server # Update Coolify
quicklify maintain my-server # Full maintenance (snapshot + update + health + reboot)
quicklify maintain --all # Maintain all servers
quicklify backup my-server # Backup DB + config
quicklify backup --all # Backup all servers
quicklify restore my-server # Restore from backup
quicklify snapshot create my-server # Create VPS snapshot (with cost estimate)
quicklify snapshot list my-server # List snapshots
quicklify snapshot list --all # List all snapshots across servers
quicklify snapshot delete my-server # Delete a snapshot
quicklify firewall status my-server # Check firewall
quicklify firewall setup my-server # Configure UFW
quicklify secure audit my-server # Security audit
quicklify secure setup my-server # SSH hardening + fail2ban
quicklify domain add my-server --domain example.com # Set domain + SSL
quicklify monitor my-server # CPU, RAM, disk usage
quicklify logs my-server # View Coolify logs
quicklify logs my-server -f # Follow logs
quicklify health # Health check all servers
quicklify doctor # Check local environment
| Provider | Status | Regions | Starting Price |
|---|---|---|---|
| Hetzner Cloud | Stable | EU, US | ~€4/mo |
| DigitalOcean | Stable | Global | ~$18/mo |
| Vultr | Stable | Global | ~$10/mo |
| Linode (Akamai) | Beta | Global | ~$24/mo |
Prices reflect the default starter template per provider. You can choose a different size during setup. Linode support is in beta — community testing welcome.
Deploy with a single config file:
# quicklify.yml
provider: hetzner
region: nbg1
size: cax11
name: my-coolify
fullSetup: true
domain: coolify.example.com
quicklify init --config quicklify.yml
| Template | Best For | Includes |
|---|---|---|
starter | Testing, side projects | 1–2 vCPU, 2–4 GB RAM |
production | Live applications | 2–4 vCPU, 4–8 GB RAM, full hardening |
dev | Development & CI/CD | Same as starter, no hardening |
quicklify init --template production --provider hetzner
Quicklify is built with security as a priority — 1,750+ tests across 64 suites, including dedicated security test suites.
StrictHostKeyChecking=accept-new with IP validation (octet range) and environment filteringspawn/spawnSync, no execSync)0o600)--full-setup enables UFW firewall and SSH hardening automatically# Run directly (recommended)
npx quicklify <command>
# Or install globally
npm install -g quicklify
quicklify <command>
Requires Node.js 20 or later.
Server creation fails?
Run quicklify doctor --check-tokens to verify your API token and local environment.
Coolify not responding?
Use quicklify status my-server --autostart to check and auto-restart if needed.
Need to start fresh?
quicklify destroy my-server removes the cloud server entirely.
See CONTRIBUTING.md for development setup, testing, and contribution guidelines.
Quicklify includes a built-in Model Context Protocol server for AI-powered server management. Works with Claude Code, Cursor, Windsurf, and other MCP-compatible clients.
{
"mcpServers": {
"quicklify": {
"command": "npx",
"args": ["-y", "-p", "quicklify", "quicklify-mcp"],
"env": {
"HETZNER_TOKEN": "your-token",
"DIGITALOCEAN_TOKEN": "your-token",
"VULTR_TOKEN": "your-token",
"LINODE_TOKEN": "your-token"
}
}
}
}
Available tools:
| Tool | Actions | Description |
|---|---|---|
server_info | list, status, health | Query server information, check cloud provider & Coolify status |
server_logs | logs, monitor | Fetch Coolify/Docker logs and system metrics via SSH |
server_manage | add, remove, destroy | Register, unregister, or destroy cloud servers |
server_maintain | update, restart, maintain | Update Coolify, restart servers, run full maintenance |
server_secure | secure, firewall, domain | SSH hardening, firewall rules, domain/SSL management (10 subcommands) |
server_backup | backup, snapshot | Backup/restore databases and create/manage VPS snapshots |
server_provision | create | Provision new Coolify servers on cloud providers |
All destructive operations (destroy, restore, snapshot-delete, provision, restart, maintain, snapshot-create) require
SAFE_MODE=falseto execute.
Infrastructure should be boring, predictable, and safe.
Quicklify is not a script. It's your DevOps safety layer for Coolify.
MIT — see LICENSE
Built by @omrfc
FAQs
Deploy and manage self-hosted infrastructure on cloud providers
The npm package quicklify receives a total of 777 weekly downloads. As such, quicklify popularity was classified as not popular.
We found that quicklify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.