Compare
Nixploy vs Dokploy
The governance features Dokploy sells as Enterprise — SSO/SAML, fine-grained roles, audit logs and white-labelling — are in Nixploy's free, Apache-2.0 build.
Every claim about Dokploy below links to where it was read, and was read rather than remembered — last checked 18 September 2026. These projects ship weekly, so if something here is out of date, tell us and it gets fixed. We have not included opinions about anybody's reliability or security history.
What Dokploy is
A self-hosted PaaS built on Docker Swarm and Traefik, with Git deploys, Compose stacks, databases and backups. It moved to an open-core model: most of the repository is Apache-2.0, and a /proprietary directory is licensed separately, with production use requiring a commercial agreement.
- GitHub stars
- 37.4k · Nixploy has 3
Where they differ
Single sign-on
- Dokploy
- “SSO / SAML (Azure, OKTA, etc)” is listed under the Enterprise tier. source
- Nixploy
- OIDC single sign-on in the box, with presets, group→role mapping and per-organization enforcement. Free.
Roles and permissions
- Dokploy
- Hobby is “1 User” with basic role permissions unavailable; “Basic RBAC (Admin, Developer)” starts at the Startup tier; “Fine-grained RBAC” is Enterprise. source
- Nixploy
- A 27-entry capability catalogue with per-member overrides on top of a five-step role ladder, plus teams that scope a member to specific projects. Free.
Audit log
- Dokploy
- “Audit Logs” is listed under the Enterprise tier. source
- Nixploy
- Every mutation writes a row with actor, IP and user agent; filterable, exportable as CSV, optionally forwarded to alerts. Free.
White-labelling
- Dokploy
- “White Labeling” is listed under the Enterprise tier. source
- Nixploy
- Product name, logos, favicon, accent and sanitised custom CSS, applied to the login page too. Free.
SCIM user provisioning
- Dokploy
- “SCIM User Provisioning” is listed under the Enterprise tier. source
- Nixploy
- Not built. Group→role mapping on SSO login covers most of the demand; SCIM is a deliberate deferral.
Licence
- Dokploy
- Apache-2.0 outside /proprietary; that directory is under the Dokploy Source Available Licence, which permits production use only with a commercial agreement. source
- Nixploy
- Apache-2.0, whole repository, no proprietary directory, no commercial agreement.
Pick Dokploy if
- It is a far bigger project — 37.4k stars against our 3 — with the community, the third-party tutorials and the battle-testing that follows from that.
- It has a much larger template catalogue and a longer track record on real production installs.
- If you want somebody to call, they sell support tiers and we do not.
Pick Nixploy if
- Nothing is held back for a paid tier. There is no paid tier.
- The MCP endpoint is a first-class surface, not a wrapper: 35 annotated tools dispatching through the same routers as the UI, so organization scope, capability checks and the audit trail apply to an agent identically.
- Teams scope a member to projects, and a project they cannot reach answers “not found”, never “forbidden”.
- Any domain can be put behind the panel's own login in one switch, with your 2FA and SSO policy.
Try it on one box
Nixploy installs alongside nothing and takes one command. Point it at a spare VPS before you move anything real.
install.sh
curl -fsSL https://raw.githubusercontent.com/bablilayoub/nixploy/main/install.sh | sudo bash