Lightweight, unofficial Bitwarden-compatible password vault written in Rust
ZITADEL - Identity infrastructure, simplified for you.
Recommended VPS & Hardware Sizing
Estimated Hosting: $10 - $15/mo (e.g. Hetzner CPX21 or Linode)Zitadel vs Auth0 / Okta Comparison Matrix
| Evaluation Criteria | Zitadel (Open Source) | Auth0 / Okta (Proprietary) |
|---|---|---|
| MAU Penalty | Scale to millions of users without auth tax | $35 - $240+ per month as MAU expands |
Financial Impact: Migrating from Auth0 / Okta to Self-Hosted Zitadel
* Excludes enterprise SSO add-ons & usage overages
* Commodity Hetzner / DigitalOcean compute instance
Compare Zitadel Head-to-Head
Comprehensive benchmark comparing Zitadel against proprietary Auth0 / Okta licensing and features.
RedHat Enterprise IAM vs Modern Python/Go Identity Provider
Bitwarden-Compatible Lightweight Rust Server vs 1Password SaaS
Developer-First Secret Management & Sync vs Complex Enterprise HSM Vault
Self-Hosted Control Server vs Tailscale Cloud Coordination Service
Lightweight Headscale Coordination vs Full-Featured Zero-Trust Network
Core Capabilities & Features
Self-Host Zitadel with Docker Compose
Tweak configuration ports, secrets, and volumes live. Download or copy your ready-to-run container file:
1-Click Docker Compose Generator
Generate production-ready container definitions with customizable ports and volumes.
Cloud-native identity and access management with B2B multi-tenancy
version: '3.8'
services:
zitadel:
image: ghcr.io/zitadel/zitadel:latest
restart: unless-stopped
ports:
- "${PORT:-8080}:8080"
command: 'start-from-init --masterkey "${MASTER_KEY:-MasterkeyNeedsToHave32Characters!}"'
environment:
- ZITADEL_DATABASE_POSTGRES_HOST=db
- ZITADEL_DATABASE_POSTGRES_PORT=5432
- ZITADEL_DATABASE_POSTGRES_DATABASE=zitadel
- ZITADEL_DATABASE_POSTGRES_USER_USERNAME=zitadel
- ZITADEL_DATABASE_POSTGRES_USER_PASSWORD=${DB_PASSWORD:-zitadel_pass}
- ZITADEL_EXTERNALSECURE=false
depends_on:
- db
db:
image: postgres:15-alpine
restart: unless-stopped
environment:
- POSTGRES_USER=zitadel
- POSTGRES_PASSWORD=${DB_PASSWORD:-zitadel_pass}
- POSTGRES_DB=zitadel
volumes:
- zitadel_pgdata:/var/lib/postgresql/data
volumes:
zitadel_pgdata:Frequently Asked Questions: Self-Hosting Zitadel
How do I self-host Zitadel using Docker Compose?
You can deploy Zitadel (zitadel/zitadel) on any Linux server by copying the docker-compose.yml template on this page, configuring your desired host port and persistent volume directory, and running 'docker compose up -d'.
How does Zitadel compare to Auth0 / Okta?
Zitadel is an open-source, self-hosted alternative to Auth0 / Okta built with Go, Angular, CockroachDB / PostgreSQL. Unlike Auth0 / Okta ($35 - $240+ / month (Penalties on MAU)), Zitadel has zero per-user licensing fees and keeps 100% of your data on your own infrastructure.
What are the minimum VPS RAM and CPU requirements for Zitadel?
For production self-hosting (Medium difficulty tier), we recommend at least 4 GB RAM (minimum 2 GB), 2 vCPU, and 25 GB SSD storage, which typically costs $10 - $15/mo (e.g. Hetzner CPX21 or Linode).
Is Zitadel free for commercial business use under the AGPL-3.0 license?
Yes. Distributed under the AGPL-3.0 license, Zitadel can be self-hosted internally by businesses and engineering teams of any size without per-seat royalties.
Embed Official Zitadel Badge in GitHub README
Served locally from OSSMatrix with Cloudflare global edge caching. Real-time verified alternative status, zero third-party dependencies, sub-5ms load time.
[](https://ossmatrix.com/project/zitadel)<a href="https://ossmatrix.com/project/zitadel" target="_blank" rel="noopener noreferrer"><img src="https://ossmatrix.com/api/badge/zitadel" alt="Zitadel on OSSMatrix" /></a>Compare Zitadel with Other Self-Hosted Alternatives
An open source, self-hosted implementation of the Tailscale control server
Open-source Identity and Access Management for modern applications
Zero-trust WireGuard overlay network with SSO and MFA access control
Open-source secret management platform for teams
Open-source Identity Provider focused on flexibility and enterprise versatile authentication flows