> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Self-hosting Infisical

> Run Infisical on your own infrastructure, from a single container to a high availability cluster.

You can self-host Infisical instead of using Infisical Cloud. This keeps your data on your own infrastructure and network.

> [accordion] Why self-host?
>
> Teams usually choose self-hosting for two reasons:
>
> * **Compliance.** Running Infisical inside your own environment lets it sit behind your existing security controls, which matters for SOC 2, HIPAA, and FIPS 140-3. All data stays under your governance.
> * **Flexibility.** You control the deployment topology. Infisical runs on air-gapped bare metal, Kubernetes clusters, and cloud VMs alike, so you can tune networking, security, and performance to fit.

Before you begin, check the [hardware requirements](https://infisical.com/docs/self-hosting/configuration/requirements.md) for your expected load. If you need Enterprise features such as SSO or gateways, see [Enterprise licensing](https://infisical.com/docs/self-hosting/ee.md).

## Get started

Pick the platform you already run:

> [card] [Docker](https://infisical.com/docs/self-hosting/deployment-options/standalone-infisical.md)
>
> A single packaged container. The quickest way to get an instance running.

> [card] [Docker Compose](https://infisical.com/docs/self-hosting/deployment-options/docker-compose.md)
>
> Infisical, PostgreSQL, and Redis together from one template.

> [card] [Kubernetes](https://infisical.com/docs/self-hosting/deployment-options/kubernetes-helm.md)
>
> Deploy with the official Helm chart, with bundled PostgreSQL and Redis.

> [card] [Linux package](https://infisical.com/docs/self-hosting/deployment-options/native/linux-package/installation.md)
>
> Install directly on a host, with no containers involved.

> [card] [AWS](https://infisical.com/docs/self-hosting/deployment-options/aws-native.md)
>
> ECS with Fargate, backed by RDS, ElastiCache, and an ALB.

> [card] [GCP](https://infisical.com/docs/self-hosting/deployment-options/gcp-native.md)
>
> GKE, backed by Cloud SQL and Memorystore.

## Configure

Apply settings once the instance is running:

> [card] [Environment variables](https://infisical.com/docs/self-hosting/configuration/envars.md)
>
> Every variable the instance reads, and which ones are required.

> [card] [Custom certificates](https://infisical.com/docs/self-hosting/guides/custom-certificates.md)
>
> Trust an internal certificate authority or use your own TLS certificates.

> [card] [HSM integration](https://infisical.com/docs/self-hosting/guides/hsm-integration.md)
>
> Back the encryption root key with a hardware security module.

> [card] [Programmatic provisioning](https://infisical.com/docs/self-hosting/guides/automated-bootstrapping.md)
>
> Set up an instance from scratch without touching the UI.

> [card] [CDN caching](https://infisical.com/docs/self-hosting/guides/cdn-caching.md)
>
> Serve static assets from a CDN to cut load times.

## Operate

Keep the instance healthy once it's carrying real traffic:

> [card] [Server admin console](https://infisical.com/docs/documentation/platform/admin-panel/server-admin.md)
>
> Instance-wide settings, user management, and sign-up controls.

> [card] [Upgrade Infisical](https://infisical.com/docs/self-hosting/guides/upgrading-infisical.md)
>
> Move to a newer version without losing data.

> [card] [Multi-region replication](https://infisical.com/docs/self-hosting/guides/replication.md)
>
> Run read replicas closer to the teams that use them.

> [card] [Production hardening](https://infisical.com/docs/self-hosting/guides/production-hardening.md)
>
> What to lock down before you put an instance in front of a team.

> [card] [Monitoring and telemetry](https://infisical.com/docs/self-hosting/guides/monitoring-telemetry.md)
>
> Collect metrics and traces with Grafana and OpenTelemetry.

> [card] [Migrate Mongo to PostgreSQL](https://infisical.com/docs/self-hosting/guides/mongo-to-postgres.md)
>
> Move an instance from the older MongoDB backend.

## Common questions

Answers to the questions that come up most often when running your own instance, including licensing, upgrades, and backups.

> [card] [Self-hosting FAQ](https://infisical.com/docs/self-hosting/faq.md)
>
> Read the FAQ.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.