Where sh0 is going

Everything needed to deploy and manage applications on a single server. 29 phases, 2 security audits, a full dashboard redesign, and 90+ engineering sessions.

• 10 Rust crates, single binary, ~140MB idle RAM
• 180+ API endpoints, 19 CLI commands, 22 dashboard pages
• 5 deploy pipelines (Git, Docker Image, Dockerfile, ZIP, Template/Compose)
• 183 Deploy Hub options, 170 one-click templates across 15 categories
• 19 stack detectors, 15 Dockerfile templates, 34+ Code Health Check rules
• Auto-SSL (Let's Encrypt), custom SSL certificates with CSR generation
• Monitoring, 5 alert channels, uptime checks, public status pages
• Backups with 13 storage providers (S3, R2, SFTP, Dropbox, Google Drive)
• Autoscaling (1-50 replicas), 3 load balancing strategies
• Team RBAC (4 tiers), TOTP 2FA, Google OAuth, audit logging
• Web terminal (xterm.js), file browser, inline editor
• Cron jobs (50/app), deploy hooks (4 stages), preview environments (per PR)
• sh0.yaml Infrastructure as Code, export to 7 formats (K8s, AWS, GCP, Vercel...)
• Stack-based dashboard, Cmd+K palette, 5 languages, dark/light theme
• 51 security issues fixed, AES-256-GCM encryption, CSRF/SSRF prevention

Deploy across multiple servers from a single sh0 instance. Bring Your Own Server with SSH tunnel management. Business plan feature.

• Remote node registration via pure Rust SSH (russh)
• SSH TOFU (Trust on First Use) with host key fingerprint verification
• Docker image transfer via save/load over SSH tunnels
• Node-aware deploy pipeline dispatching builds to remote servers
• Dashboard: node management with status indicators and health monitoring
• Node hardening: error handling, connection validation, graceful cleanup

One-command installation and automated release builds. The public launch pipeline.

• Install script: curl -fsSL https://get.sh0.dev | bash
• GitHub Actions CI/CD with cross-compilation
• Docker image: ghcr.io/zerosuite/sh0
• Linux x86_64 + aarch64 musl static binaries
• GitHub Releases with changelogs and checksums
• Auto-update check mechanism

Full AI integration with MCP protocol server, 105 tools, AI sandbox, and multi-model chat. Connect from Claude Desktop, Cursor, or the built-in dashboard.

• MCP server: Streamable HTTP, 105 tools, JSON-RPC 2.0, session management
• OpenAPI-driven tool generation with x-mcp-* extensions (single source of truth)
• 3-tier safety: scoped API keys, risk classification, confirmation tokens
• AI gateway: 3-way routing (MCP connector, legacy, docs expert)
• AI Sandbox: Alpine sidecar per app with shell, packages, volume access
• Dashboard AI chat with model selector and conversation history
• Prepaid wallet billing (Haiku, Sonnet, Opus) with BYOK on Business plan
• 10 audit rounds across 5 phases -- 0 critical issues in production

Web search, URL browsing, and specialist AI agents (DevOps, DBA, Security, SRE, Network). The AI can research real documentation and answer with domain expertise.

• Native web search powered by Claude with source citations
• 6 specialist agents with domain-specific system prompts
• Agent picker modal with category filtering
• Per-conversation agent persistence and switching

Free tier expansion, Docker distribution, self-update system, and 12 bug fixes across CLI, auth, scaling, and license gating.

• Backups available on Free plan (local storage)
• Docker image on Docker Hub and GHCR
• Self-update command (sh0 update)
• Systemd service auto-setup + uninstall command
• Inline upgrade banners (replaces full-page blockers)
• CLI consistency: unified positional args, cron list alias, export syntax
• 12 bug fixes: ssh lookup, WebSocket auth, scale-down, start idempotency

Three major managed services: S3-compatible file storage (MinIO), standalone database servers with 5 engines, and managed email hosting (Stalwart) with full DNS auto-configuration.

• Managed S3-compatible object storage: buckets, access keys, usage monitoring
• Standalone database servers: PostgreSQL, MySQL, MariaDB, MongoDB, Redis
• Managed email hosting with DKIM/SPF/DMARC auto-configuration
• 4-step DNS wizard with Cloudflare auto-configure
• Database admin UI (dbGate, phpMyAdmin, Mongo Express) and external access with IP allowlist
• Mailboxes, aliases, catch-all, and deliverability monitoring
• Global domains page and 50+ new API endpoints

Mail enhanced features, license gating for all BaaS services, Trustpilot integration, 15 security fixes (5 critical + 10 important), 8 SEO alternative pages, homepage redesign, pricing comparison matrix, and investor relations page. sh0 is feature-complete.

• Mail enhanced features: spam filters, vacation auto-reply, Sieve rules, DKIM rotation, mail queue monitoring
• License gating: all BaaS services gated to Pro+ with UpgradePrompt popups (12 pages)
• 15 security fixes: Sieve injection, MCP scope bypass on 92 tools, path traversal, vacation data loss, and more
• Trustpilot review integration, BaaS quick stats, homepage redesign, pricing matrix (27 rows)
• 8 SEO alternative pages, investor relations page, AI system prompt updates, 979 i18n keys

sh0 is feature-complete. This phase focuses on stability, security patches, performance, and polish. No new features -- only refinements.

• Bug fixes, performance optimizations, and stability improvements
• Security patches and dependency updates
• Dashboard UX polish and accessibility improvements
• Documentation updates and onboarding flow refinements

Complete translation of the dashboard and documentation into multiple languages. Making sh0 accessible to developers worldwide.

• Full dashboard translation (UI labels, messages, notifications)
• Supported languages: French, Spanish, Portuguese, Arabic, Swahili, Chinese, Japanese
• Language auto-detection with manual override in settings
• Translated documentation and CLI help output

Five workstreams shipped since v1.7.1: services in a project reach each other by name, sh0 backs up and restores its own database, diagnostics arrive during the wait, the archive path makes deployment possible without a git repository, and an installation updates itself without SSH.

• Project network: a stable internal alias follows the container when its address changes
• sh0 instance backup and restore: consistent database snapshot via VACUUM INTO
• Diagnostics during the wait: container logs, per-step cost, disk pressure alert
• Archive path: deploy your own code without a git repository, in Node, Python, Go or Rust
• sh0 update and sh0 doctor: update and repair without SSH and without downtime

The panel moves to a domain of your own, and three proxy failures stop looking alike.

• Adoption path for the panel's own domain, with the old address named as it stops answering
• Three proxy failures, three distinct status codes instead of one 404
• Dashboard status pills follow the panel's language
• The OpenAPI document reports the version of the binary serving it

The port you choose reaches your application, and the deploy path is proven on a real machine rather than in unit tests.

• The port field starts empty on all four paths; the image's EXPOSE decides when you say nothing
• ENV PORT in twelve more templates, ENV SERVER_PORT for Spring Boot
• A failed health probe names the port actually open in the container
• Backup codes survive and regenerate; every protected sign-in is written to the audit log
• One language per visitor, cached and pre-compressed assets: the sign-in page drops 99.5% on return

v1.10.1 and v1.10.2: every API key is held to its scope on every path, and remote nodes behave like the local server.

• Three API key levels enforced on REST and MCP alike: read, deploy, admin
• Sandbox and log tools check project access; apps on *.sh0.app keep their own headers
• Remote nodes: replicas, metrics, autoscaling and cron run on the node itself
• Audit log export as CSV or JSON
• Git push deploys again; repository credentials never touch the disk

v1.10.4 to v1.10.7: the fixes from the independent audit of 5 October 2026, signed releases, and S3 storage that works.

• Panel domain reserved; the first owner is created only with the installation token
• Updates and installer verify a minisign signature over the checksums
• Secrets withheld from insufficient roles; single-use recovery codes; replayed git webhooks refused
• S3-compatible storage: MinIO works and the path-style setting means what it says