Yundera is a managed self-hosting platform. You pick a hosting provider like Hetzner, Contabo, or Scaleway, and Yundera sets up and manages the entire server for you. Install apps with one click, get automatic domains and HTTPS, and pay one flat monthly price with no per-app or per-user fees.

Is Yundera real self-hosting?

Yes. Your data lives on your server at your chosen hosting provider. Yundera handles server management, domains, and reachability. Your app traffic goes directly to your server. Only behind CGNAT does traffic travel through an encrypted WireGuard tunnel.

How is Yundera different from Cloudron or YunoHost?

Cloudron and YunoHost are software you install on a server you provision and maintain yourself. Yundera manages the entire server for you — you just pick apps. No SSH, no Docker, no SSL renewals, no Linux administration required.

Is my traffic encrypted?

Yes. All traffic is encrypted with HTTPS (TLS). Use sslip.io for true end-to-end encryption, or nsl.sh subdomains for convenient encrypted-in-transit access.

Can I use my own domain?

Yes. Point any domain at your server using a Cloudflare CNAME record or a direct A record.

Where is my data stored?

All data stays on your server at your chosen hosting provider. Nothing is stored on Yundera servers.

What apps can I install?

Nextcloud, Immich, Jellyfin, Vaultwarden, n8n, Ghost, Docmost, Uptime Kuma, and 100+ more. All install with one click and get automatic domains and HTTPS.

Do I need technical knowledge?

No. Apps install with one click. Domains and HTTPS are automatic. Advanced users can SSH in and customize everything.

What if Yundera servers go down?

Your apps and data remain on your server. Local network access continues. Only nsl.sh domains would be temporarily unavailable.

Is NSL.SH open source?

Yes. NSL.SH is the open-source networking layer that provides automatic domains and HTTPS. Fully open source on GitHub at github.com/Yundera/mesh-router-root. Uses WireGuard.

How much does Yundera cost?

Starting from EUR 11.99/month depending on the hosting provider you choose. One flat price includes server management, all apps, all users. No per-app or per-user fees.

Which hosting providers does Yundera support?

Hetzner, Contabo, Scaleway, Vultr, and others. You pick the provider and plan. Yundera publishes benchmarks on 1,247 servers from 38 providers to help you choose.

How do I backup my data?

All data is under /DATA/. Use rsync to copy to USB or remote server. Automatic daily backups via cron.

Can I migrate from other platforms?

Yes. Export data from your current platform, install the same app on Yundera, copy data to /DATA/AppData/.

Is Yundera GDPR compliant?

All data stored on your server at your chosen provider. Yundera servers never store personal data. Aptero SAS is headquartered in Paris under EU law.

Glossaire

Définitions canoniques des termes utilisés dans cette documentation.

Terme	Définition
PCS	Personal Cloud Server — votre machine exécutant la pile logicielle Yundera et vos apps installées.
NSL.SH	Le réseau mesh open source qui fournit des domaines automatiques, TLS et la joignabilité pour les instances PCS Yundera.
mesh-router	Le composant gérant la terminaison SSL et la résolution dynamique de domaines sur votre PCS. Configure des tunnels WireGuard quand la connectivité directe n'est pas disponible.
AppShield	Un conteneur sidecar d'authentification qui fournit le SSO (Single Sign-On) à travers les apps sur votre PCS. Anciennement appelé `nginx-hash-lock`.
casa-img	La distribution personnalisée de Yundera basée sur CasaOS, fournissant le runtime d'apps et le tableau de bord.
Forme de domaine	`{sous-domaine}.{domaine-utilisateur}.{domaine-serveur}` — ex. `immich.john.nsl.sh`.
Adresse sslip.io	`{ip-publique-avec-tirets}.sslip.io` (ex. `203-0-113-42.sslip.io`). L'adresse directe de votre PCS et le seul chemin avec un TLS strict de bout en bout.
Domaine personnalisé	Votre propre domaine pointé vers votre PCS via un CNAME Cloudflare ou un enregistrement A direct. Voir Utiliser Votre Propre Domaine.
Plan de contrôle	Résolution et vérification de domaines — transite toujours par le backend NSL.SH. C'est ce qui vous donne les domaines automatiques et le TLS.
Plan de données	Votre trafic applicatif réel. Va directement à votre PCS quand il est joignable, ou via un tunnel WireGuard chiffré quand derrière un CGNAT.
Fournisseur / Demandeur	Les deux rôles dans un tunnel WireGuard entre instances PCS.
CGNAT	Carrier-Grade NAT — quand votre FAI partage une seule IP publique entre de nombreux clients, rendant les connexions entrantes directes impossibles sans tunnel.
App Store	La collection organisée d'apps basées sur Docker disponibles pour installation en un clic sur votre PCS. Source : Yundera/AppStore.
AppStoreLab	Dépôt de staging pour tester les apps avant leur promotion vers l'App Store de production.