Self-hosted CI runners
GitHub Actions runners pulling secrets from your VPS instead of GitHub-hosted runners. Tokens never leave your infra, billing stays flat regardless of build count.
Doppler VPS Hosting
Secrets management.
On your own server.
Run the Doppler CLI, Vault, or Infisical on AMD EPYC + pure NVMe.
Independent cloud since 2008 · Root SSH · Dedicated IP for CI tokens.
Starting at $2.48/mo · 50% off · No credit card required
~ ssh root@vault-prod-001connected
root@vault-prod-001:~# curl -Ls cli.doppler.com/install.sh | sh
Doppler CLI installed (v3.71)
root@vault-prod-001:~# doppler run -- ./deploy.sh
Injecting 24 secrets into env...
Deploy started.
root@vault-prod-001:~# vault status | head -3
Sealed: false · HA: enabled
root@vault-prod-001:~# _
Doppler VPS at a glance
Cloudzy hosts secrets-management workloads from 12 regions across North America, Europe, the Middle East, and Asia, starting at $2.48 per month. Plans run from 512 MB to 64 GB DDR5 on NVMe storage with 40 Gbps uplinks and a dedicated IPv4 for CI tokens. Servers provision in 60 seconds, run on AMD EPYC, and ship Ubuntu images ready for the Doppler CLI, HashiCorp Vault, or Infisical. Cloudzy has been independent since 2008, rated 4.6 / 5 by 708+ reviewers on Trustpilot.
- Starting price
- $2.48 / month
- Recommended
- 2 GB DDR5
- Provisioning
- 60 seconds
- Regions
- 12 worldwide
- Uptime SLA
- 99.95%
- Money-back
- 14 days
Why builders pick Cloudzy
Secrets infra that doesn't leak.
The four things buyers actually compare us on, done right.
Hardware that doesn't leak
Latest-gen AMD EPYC, NVMe-only storage, DDR5 memory, 40 Gbps uplinks. Dedicated tenancy means no noisy neighbors poking at your secrets store.
Risk-free trial
14-day money-back guarantee on every plan. No questions asked. Test your secrets workflow on real hardware before committing.
99.95% uptime SLA
Automated monitoring across 12 regions. Status publicly tracked at status.cloudzy.com, when secrets are unavailable, deploys stall. Don't let that happen.
24/7 human support
Real engineers on chat in minutes, not hours. We won't read your secrets, but the Linux, Docker, and networking layer is fully on us.
Stack you can run
From CLI to controller.
All in one VPS.
Stack the open-source pieces your team already uses. Doppler CLI for sync, Vault for storage, sealed-secrets for K8s. One VPS, one bill, your own infrastructure boundary.
Custom PKI + cert-manager supported
Doppler CLI
Sync · inject · run
Vault
HashiCorp open-source
Infisical
Open-source vault
GitHub Actions
Self-hosted runner
GitLab CI
Runner + cache
Docker secrets
Compose · Swarm
K8s sealed
Sealed-secrets controller
PKI
Self-signed CA · certs
Use cases
Why DevOps teams build
on Cloudzy.
Doppler agent cache
Run the Doppler CLI on a regional VPS to cache secrets close to your deploy targets. Reduces upstream API calls, keeps deploys fast even when doppler.com has a hiccup.
Vault for homelab + small teams
HashiCorp Vault Open-Source on a 4 GB VPS handles hundreds of services, dynamic DB credentials, and PKI for under $15/month. Cheaper than HCP Vault for small footprints.
Sealed Secrets controller
Run the bitnami-labs/sealed-secrets controller for your Kubernetes clusters. Encrypted secrets in git, plaintext only inside the cluster, full GitOps without leaking credentials.
PKI + internal CA
Issue short-lived certs to your services from your own Vault PKI. Replaces Let's Encrypt for internal east-west TLS without exposing internal hostnames publicly.
Compliance-friendly secrets
Pick the region closest to where your data lives. Customer secrets never leave your VPS, useful when your auditors have feelings about US SaaS providers handling sensitive material.
60s
Provisioning
40 Gbps
Uplink
NVMe-only
Storage
12
Regions
99.95%
Uptime SLA
14 days
Money-back
Global network
12 regions. Four continents.
Pick the closest one.
Place your secrets backend close to the apps that fetch them, sub-30 ms token issuance, no cross-continent hops.
us-utah-1us-dal-1us-lax-1us-nyc-1us-mia-1eu-ams-1eu-lon-1eu-fra-1eu-zrh-1me-dxb-1ap-sgp-1ap-tyo-1
Pricing
Pay for what you use. That's it.
Hourly, monthly, or yearly. No egress fees. No commitments. Currently 50% off all plans.
512 MB DDR5
CLI host · Lab use
$2.48/mo
$4.95/mo−50%
Deploy now14-day money-back
- 1 vCPU @ EPYC
- 20 GB NVMe
- 1 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
1 GB DDR5
Solo dev · Personal vault
$3.48/mo
$6.95/mo−50%
Deploy now14-day money-back
- 1 vCPU @ EPYC
- 25 GB NVMe
- 1 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
2 GB DDR5
Small team · Shared secrets
$7.475/mo
$14.95/mo−50%
Deploy now14-day money-back
- 1 vCPU @ EPYC
- 60 GB NVMe
- 3 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
Most popular
4 GB DDR5
Production · CI/CD pipelines
$14.47/mo
$28.95/mo−50%
Deploy now14-day money-back
- 2 vCPU @ EPYC
- 120 GB NVMe
- 5 TB · 40 Gbps
- Dedicated IPv4 + IPv6
- Root SSH · KVM
FAQ. Doppler VPS
Common questions, straight answers.
What is a Doppler VPS?
A Doppler VPS is a Linux Virtual Private Server you use to run secrets management infrastructure. Doppler CLI for syncing config, plus open-source backends like HashiCorp Vault or Infisical for self-hosted storage. Full root access, dedicated IP, and resources you control.
Can I run the Doppler service itself?
Doppler the SaaS runs on doppler.com, what you self-host on this VPS is the CLI, sync agents, and the open-source secrets backends Doppler integrates with (Vault, Infisical, etcd). The pattern is: Doppler in the cloud for the UI, your VPS for caching, syncing, and CI tokens.
How much RAM do I need?
1-2 GB DDR5 is plenty for the Doppler CLI plus a Vault or Infisical instance for a small team. 4 GB DDR5 is the comfortable spot if you're running CI runners alongside, or syncing across many environments. Heavy CI workloads push you to 8 GB+.
Does the Doppler CLI work over SSH?
Yes. Install the official Doppler CLI on Ubuntu (one apt-get command), authenticate once with a service token, and it pulls secrets into env files, Docker containers, or Kubernetes pods on demand. No persistent state on disk by default, secrets stay in memory.
How fast does the VPS provision?
60 seconds after payment clears. Installing the Doppler CLI is one command, configuring a project takes another minute. Within 5 minutes of checkout you can be syncing secrets to a Docker container on this VPS.
Can I use this for CI/CD secrets?
Yes, this is the most common use case. Run GitHub Actions runners, GitLab CI, or Jenkins on the VPS. Secrets stay on infrastructure you control, never leak into shared CI vendor logs, and you avoid per-job secret-fetch fees from external services.
What's the security model?
Same as any Linux VPS: dedicated CPU + RAM (no shared tenants), KVM isolation, your own firewall, root SSH with key-only auth recommended. Pair it with Cloudzy's free DDoS protection and the host network is hardened by default. App-level secret rotation is on you.
Can I scale up later?
Yes. RAM, vCPU, and storage all hot-plug live from the panel. Most upgrades complete in under 60 seconds without rebuilding. Move from 2 GB to 16 GB without touching your Doppler config or CI runners.
Is the data backed up?
Snapshots are free on every Cloudzy plan, schedule one before any major upgrade. For Vault data specifically, the recommended pattern is encrypted backups to S3-compatible storage, plus the VPS snapshot as a fallback. Doppler-hosted secrets remain on doppler.com.
Is there a money-back guarantee?
Yes, 14 days from purchase, no questions asked, full refund. Apply from the panel or email [email protected].
Ready when you are.
Secrets infra in 60 seconds.
Pick a region, deploy, install Doppler CLI. Your first sync runs before your coffee gets cold.
No credit card required · 14-day money-back guarantee · Cancel anytime