Deploy Cerbos on your own server.
Cerbos is an open-source authorization layer that lets you define context-aware access control rules for your application in simple YAML policies, managed through your existing Git-ops workflow. It runs as a stateless Policy Decision Point (PDP) that your backend services call over HTTP or gRPC to check whether a principal can perform an…
Your infrastructureAutomatic HTTPSNo lock-in
Screenshots
A closer look at Cerbos.
Setup time
A few minutes
Deployment
Your own server
Services
1 connected service
Why Cerbos
Everything you need, running where you choose.
Get the full Cerbos experience with Easypanel handling the repetitive infrastructure work around it.
RBAC and ABAC
Start with simple roles, then add dynamic, attribute-based conditions
HTTP and gRPC APIs
Call CheckResources and PlanResources from any language or SDK
Live Policy Reloading
Edit policy files and Cerbos picks up the changes automatically
Derived Roles
Extend RBAC roles dynamically based on request context
Policy As Code
Define access rules in YAML, versioned in your own Git repository
Stateless
No database required — policies are loaded straight from disk
How it works
From template to live app in three steps.
Easypanel turns the template into real services, storage, and domains on the server you already control.
Already have Easypanel? Open your dashboard at the URL or IP of your own installation.
Installation guide1
Open your dashboard
Visit the URL or IP of your Easypanel installation and choose the target project.
2
Choose Cerbos
Open Templates, select Cerbos, then review its service names and configuration.
3
Deploy and open your app
Easypanel starts every service and provisions an HTTPS domain for you.
Installation options
The template asks for these values before creating your services.
| Option | Default | Required |
|---|---|---|
App Service Name | cerbos | Required |
App Service Image | ghcr.io/cerbos/cerbos:0.54.0 | Required |
Before you deploy
Cerbos is an API service with no web dashboard — there is nothing to log into. Write your policy YAML files into the "policies" volume (browse it from the service's file manager); Cerbos watches that folder and picks up changes automatically, no restart needed. Call the HTTP API at your assigned domain on port 3592, or use the gRPC endpoint on the published port 3593 from other services in this project.
Resources
Project documentation and source code.
Latest template update
Jul 30, 2026
first release
Questions
Deploy with confidence.
The template handles the application setup while Easypanel keeps the infrastructure understandable and under your control.
Keep exploring
Browse allRelated templates
Authelia
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion to reverse proxies such as Traefik, Nginx, or Caddy to control whether requests should pass through. Authelia is also an OpenID Connect 1.0 certified identity provider, enabling modern authentication flows for applications that support it. Key features include multi-factor authentication via TOTP, WebAuthn, or Duo; fine-grained access control rules; session management with configurable timeouts; LDAP and file-based user backends; and SQLite, PostgreSQL, or MariaDB storage.
View template
Authorizer
Authorizer is a powerful tool designed to simplify the process of user authentication and authorization in your applications. It allows you to build secure apps 10x faster with its low code tool and low-cost deployment. With Authorizer, you have full control over your user data, which can be stored in your preferred database. The app supports multiple authentication recipes and allows you to authorize users based on your business roles. It is compatible with OAuth2 and OpenID APIs. Authorizer also offers secure session management with the best services baked in, including HTTP only cookies and Authorization Code flow for mobile-based authentication. It supports a wide range of databases, including major SQL, NoSQL, and GraphDBs. You can customize emails, configure webhooks for various events, and add an extra layer of security with email-based OTP for basic authentication. With Authorizer, you can deploy your authentication and authorization service anywhere with multiple deployment options. It is a comprehensive solution for all your authentication and authorization needs.
View template
Cap Captcha
Cap is a lightweight, open-source CAPTCHA alternative to reCAPTCHA, hCaptcha and Cloudflare Turnstile. It uses proof-of-work and instrumentation challenges instead of visual puzzles, so users are verified in the background without picking out crosswalks or storefronts. The widget is about 250x smaller than hCaptcha, sends zero telemetry, and this standalone server includes an admin dashboard for managing site keys and viewing challenge analytics.
View template
Ready to deploy Cerbos?
Open your own Easypanel dashboard, choose Cerbos from Templates, and review the deployment options.