
Security News
minimatch Patches 3 High-Severity ReDoS Vulnerabilities
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.
Your self-hosted PaaS, fully managed. Deploy, secure, back up — one command at a time.
English | Türkçe
Most self-hosted servers break because:
Stop babysitting your servers. Quicklify was built to fix that.
# Interactive mode — no commands to memorize
npx quicklify
Running quicklify without any arguments launches an interactive menu where you can browse all available actions by category, pick what you need with arrow keys, and configure options step by step — no need to remember any command names or flags.
? What would you like to do?
Server Management
❯ Deploy a new server
Add an existing server
List all servers
Check server status
...
Security
Harden SSH & fail2ban
Manage firewall (UFW)
...
Each action includes sub-options (server mode, template, log source, port number, etc.) and a ← Back option to return to the main menu at any point.
If you already know the commands, you can still use them directly:
quicklify init # Deploy a new server
quicklify status my-server # Check server status
quicklify backup --all # Backup all servers
Quicklify handles server provisioning, SSH key setup, firewall configuration, and platform installation automatically.
| Problem | Solution |
|---|---|
| Broke your server with an update? | Pre-update snapshot protection via maintain |
| No idea if your server is healthy? | Built-in monitoring, health checks, and doctor diagnostics |
| Security is an afterthought? | Firewall, SSH hardening, SSL, and security audits built-in |
| Backups? Maybe someday... | One-command backup & restore with manifest tracking |
| Managing multiple servers? | --all flag across backup, maintain, status, and health |
| Existing server not tracked? | quicklify add brings any server under management |
| Don't want to memorize commands? | Just run quicklify — interactive menu guides you |
quicklify # Interactive menu (recommended)
quicklify init # Interactive setup (direct)
quicklify init --provider hetzner # Non-interactive
quicklify init --config quicklify.yml # From YAML config
quicklify init --template production # Use a template
quicklify init --mode bare # Generic VPS (no Coolify)
quicklify list # List all servers
quicklify status my-server # Check server status
quicklify status --all # Check all servers
quicklify ssh my-server # SSH into server
quicklify restart my-server # Restart server
quicklify destroy my-server # Destroy cloud server entirely
quicklify add # Add existing server
quicklify remove my-server # Remove from local config
quicklify config set key value # Manage default configuration
quicklify export # Export server list to JSON
quicklify import servers.json # Import servers from JSON
quicklify update my-server # Update Coolify (Coolify servers)
quicklify maintain my-server # Full maintenance (snapshot + update + health + reboot)
quicklify maintain --all # Maintain all servers
quicklify backup my-server # Backup DB + config
quicklify backup --all # Backup all servers
quicklify restore my-server # Restore from backup
quicklify snapshot create my-server # Create VPS snapshot (with cost estimate)
quicklify snapshot list my-server # List snapshots
quicklify snapshot list --all # List all snapshots across servers
quicklify snapshot delete my-server # Delete a snapshot
quicklify firewall status my-server # Check firewall
quicklify firewall setup my-server # Configure UFW
quicklify secure audit my-server # Security audit
quicklify secure setup my-server # SSH hardening + fail2ban
quicklify domain add my-server --domain example.com # Set domain + SSL
quicklify monitor my-server # CPU, RAM, disk usage
quicklify logs my-server # View server logs
quicklify logs my-server -f # Follow logs
quicklify health # Health check all servers
quicklify doctor # Check local environment
| Provider | Status | Regions | Starting Price |
|---|---|---|---|
| Hetzner Cloud | Stable | EU, US | ~€4/mo |
| DigitalOcean | Stable | Global | ~$18/mo |
| Vultr | Stable | Global | ~$10/mo |
| Linode (Akamai) | Beta | Global | ~$24/mo |
Prices reflect the default starter template per provider. You can choose a different size during setup. Linode support is in beta — community testing welcome.
Deploy with a single config file:
# quicklify.yml
provider: hetzner
region: nbg1
size: cax11
name: my-coolify
fullSetup: true
domain: coolify.example.com
quicklify init --config quicklify.yml
| Template | Best For | Includes |
|---|---|---|
starter | Testing, side projects | 1–2 vCPU, 2–4 GB RAM |
production | Live applications | 2–4 vCPU, 4–8 GB RAM, full hardening |
dev | Development & CI/CD | Same as starter, no hardening |
quicklify init --template production --provider hetzner
Quicklify is built with security as a priority — 2,047 tests across 76 suites, including dedicated security test suites.
StrictHostKeyChecking=accept-new with IP validation (octet range) and environment filteringspawn/spawnSync, no execSync)0o600)--full-setup enables UFW firewall and SSH hardening automatically# Run directly (recommended)
npx quicklify <command>
# Or install globally
npm install -g quicklify
quicklify <command>
Requires Node.js 20 or later.
Server creation fails?
Run quicklify doctor --check-tokens to verify your API token and local environment.
Coolify not responding?
Use quicklify status my-server --autostart to check and auto-restart if needed.
Need to start fresh?
quicklify destroy my-server removes the cloud server entirely.
See CONTRIBUTING.md for development setup, testing, and contribution guidelines.
Quicklify includes a built-in Model Context Protocol server for AI-powered server management. Works with Claude Code, Cursor, Windsurf, and other MCP-compatible clients.
{
"mcpServers": {
"quicklify": {
"command": "npx",
"args": ["-y", "-p", "quicklify", "quicklify-mcp"],
"env": {
"HETZNER_TOKEN": "your-token",
"DIGITALOCEAN_TOKEN": "your-token",
"VULTR_TOKEN": "your-token",
"LINODE_TOKEN": "your-token"
}
}
}
}
Available tools:
| Tool | Actions | Description |
|---|---|---|
server_info | list, status, health | Query server information, check cloud provider & Coolify status |
server_logs | logs, monitor | Fetch Coolify/Docker logs and system metrics via SSH |
server_manage | add, remove, destroy | Register, unregister, or destroy cloud servers |
server_maintain | update, restart, maintain | Update Coolify, restart servers, run full maintenance |
server_secure | secure, firewall, domain | SSH hardening, firewall rules, domain/SSL management (10 subcommands) |
server_backup | backup, snapshot | Backup/restore databases and create/manage VPS snapshots |
server_provision | create | Provision new servers on cloud providers |
All destructive operations (destroy, restore, snapshot-delete, provision, restart, maintain, snapshot-create) require
SAFE_MODE=falseto execute.
--platform dokploy)Infrastructure should be boring, predictable, and safe.
Quicklify is not a script. It's your DevOps safety layer for self-hosted infrastructure.
MIT — see LICENSE
Built by @omrfc
FAQs
Deploy and manage self-hosted infrastructure on cloud providers
The npm package quicklify receives a total of 777 weekly downloads. As such, quicklify popularity was classified as not popular.
We found that quicklify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
minimatch patched three high-severity ReDoS vulnerabilities that can stall the Node.js event loop, and Socket has released free certified patches.

Research
/Security News
Socket uncovered 26 malicious npm packages tied to North Korea's Contagious Interview campaign, retrieving a live 9-module infostealer and RAT from the adversary's C2.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.