# Deploy Cerbos with Easypanel

URL: /templates/cerbos

Cerbos is an open-source authorization layer that lets you define context-aware access control rules for your application in simple YAML policies, managed through your existing Git-ops workflow. It runs as a stateless Policy Decision Point (PDP) that your backend services call over HTTP or gRPC to check whether a principal can perform an action on a resource, supporting everything from simple RBAC to fully dynamic, attribute-based rules.

## Installation notes

Cerbos is an API service with no web dashboard — there is nothing to log into. Write your policy YAML files into the "policies" volume (browse it from the service's file manager); Cerbos watches that folder and picks up changes automatically, no restart needed. Call the HTTP API at your assigned domain on port 3592, or use the gRPC endpoint on the published port 3593 from other services in this project.

## Benefits

### Policy As Code

Define access rules in YAML, versioned in your own Git repository

### Stateless

No database required — policies are loaded straight from disk

### Self-Hosted

Runs entirely on your own infrastructure, no data leaves your project

## Features

### RBAC and ABAC

Start with simple roles, then add dynamic, attribute-based conditions

### HTTP and gRPC APIs

Call CheckResources and PlanResources from any language or SDK

### Live Policy Reloading

Edit policy files and Cerbos picks up the changes automatically

### Derived Roles

Extend RBAC roles dynamically based on request context

## Configuration

- `appServiceName` (App Service Name, required): cerbos

- `appServiceImage` (App Service Image, required): ghcr.io/cerbos/cerbos:0.54.0

## Services

- cerbos: app (ghcr.io/cerbos/cerbos:0.54.0)

## Resources

- [Website](https://www.cerbos.dev)

- [GitHub](https://github.com/cerbos/cerbos)

- [Documentation](https://docs.cerbos.dev)

- [Template source](https://github.com/easypanel-io/templates/tree/main/templates/cerbos)