Self Hosting

Explore deployment options for self-hosting Phase.

You may choose to self-host Phase to meet various compliance requirements, to simply maintain control over your data or run Phase behind your firewall.

$ npx skills add phasehq/ai

System Requirements

Supported Platforms

• Operating Systems: Linux, FreeBSD, macOS, and Windows.
• CPU Architectures: amd64 (x86) and arm64.

Dependencies

• Container Runtime: A container runtime or orchestrator such as Docker, Docker Compose, Nomad, or Kubernetes.
• TLS Certificate: You must provision a TLS certificate and access Phase over HTTPS. This can be a self-signed certificate. The default Docker Compose installation will provide a self-signed certificate.

Deployment Options

Docker Compose

Seamlessly deploy the Phase Console via Docker Compose on any machine.

Explore

Kubernetes

Deploy Phase via the official Helm chart on your Kubernetes cluster.

Explore

AWS EKS

Deploy Phase via Helm on your AWS Elastic Kubernetes Service (EKS) cluster.

Explore

AWS EC2 & RDS

Deploy the Phase Console on AWS EC2 and RDS PostgreSQL instance.

Explore

DigitalOcean

Deploy the Phase Console on a DigitalOcean droplet and a managed PostgreSQL instance.

Explore

Google Cloud Platform

Deploy the Phase Console on Google Compute Engine and a CloudSQL instance.

Explore

Microsoft Azure

Deploy the Phase Console on an Azure Virtual Machine and Azure Database for PostgreSQL.

Explore

Railway

Deploy the Phase Console on Railway.

Explore

Raspberry Pi

Deploy the Phase Console on a Raspberry Pi.

Explore

Architecture Overview

Your Responsibilities

When self-hosting Phase services on your own infrastructure, you assume sole responsibility for security, availability, and reliability. It is up to you to set up the following:

• Security:

  • Authentication: Password authentication is available by default. You can optionally configure SSO for user authentication using one of the supported providers.
  • TLS Certificates: Provision a valid TLS certificate to ensure Phase is accessed securely over HTTPS. Self-signed certificates are supported.
  • Web Application Firewall (WAF): Implement a WAF to protect against common web exploits.
  • DDoS Protection & Rate Limiting: Configure measures to mitigate Distributed Denial of Service attacks and prevent abuse through rate limiting.

• Data & Availability:

  • Database Backups & Replication: Regularly back up your database and set up replication for high availability and disaster recovery.

• Maintenance & Updates:

  • Phase Updates: Keep your Phase instance up-to-date by applying the latest upgrades and running necessary database migrations.
  • System & Dependency Updates: Regularly update the underlying host system and its dependencies to patch security vulnerabilities.

Support & Maintenance

Regular maintenance of your self-hosted Phase instance helps ensure optimal performance and security. Please see our guide on maintenance for more information.