Home / Servers / YUNOHOST

YunoHost, pre-installed, on a VPS that never asked your name

Pick YunoHost 12 at checkout, wait ten minutes, open your IP in a browser and finish the wizard. Encrypted memory, self-service reverse DNS and outbound port 25 open, from Montreal.

Deploy a YunoHost server from $9.99 / month / 4 GB RAM recommended

What you get

The official installer, unattended The machine boots Debian 12 and runs install.yunohost.org itself, the same script the project documents. Nothing forked, nothing patched, so YunoHost updates work exactly as upstream intends.
A mail server that can actually send YunoHost ships Postfix, Dovecot and rspamd. That only matters if port 25 is open and your reverse DNS matches. Both are true here, and rDNS is a field in the panel, not a ticket.
Nothing to hand over A 32-character credential is the whole account. No email, no phone, no identity documents, and no third-party crypto gateway: Bitcoin, Monero, Litecoin and stablecoins settle on our own nodes.
Encrypted memory, on by default Blackbox runs AMD SEV-SNP with the launch policy that disables debug access. The host cannot read the RAM your users' mail and files pass through.
A real IPv4 plus a /64 Every server gets a dedicated IPv4 address and a routed IPv6 /64, so YunoHost's diagnosis page is green on both without tricks.
Any term from 7 to 365 days Try it for a week or pay for a year. Pro-rata, no contract, and the machine keeps running as long as it is paid for.

From order to admin panel

Four steps, one of which is waiting.
01
Order with YunoHost 12 as the OS

Choose a Blackbox plan, set the operating system to YunoHost 12, and pick a root password or paste an SSH key. Keep encrypted memory on; disk encryption is not offered on this image.

02
Give it ten minutes

The panel shows the server as ready as soon as Debian is up. The YunoHost installer keeps running in the background for roughly ten minutes. Progress is in /var/log/yunohost-install.log, and /root/YUNOHOST-INSTALLING disappears when it is done.

03
Open https://your-ip/ and run the wizard

Accept the self-signed certificate for now, choose your main domain (your own, or a free one under nohost.me), and set the admin credentials. YunoHost fetches a Let's Encrypt certificate for you once DNS points at the server.

04
Set reverse DNS and install apps

In the Servury panel, set the reverse DNS of your IP to your mail domain. Then run YunoHost's diagnosis, fix anything it flags in your DNS, and install apps from the catalogue.

Check on the install from SSH

Log in as root with the password or key you chose at checkout. 
# still installing? the marker file exists until the installer exits
ls /root/YUNOHOST-INSTALLING 2>/dev/null && echo "still installing" || echo "done"

# follow the installer output
tail -f /var/log/yunohost-install.log

# finished but you prefer the command line to the browser wizard
yunohost tools postinstall

# after the wizard: what YunoHost thinks of your DNS, mail and ports
yunohost diagnosis run && yunohost diagnosis show --issues

Why a self-hosting box belongs on a host that cannot look inside

YunoHost exists so that one person can run mail, files, chat and a website for a family, a collective or a small business without becoming a full-time sysadmin. That is a lot of other people's data on one machine, and the machine sits in someone else's building. Two things about that building matter more than the rest of the spec sheet.

The first is what the host can see. On a Blackbox, the memory is encrypted by the CPU with a key the hypervisor never holds, there is no guest agent and no channel for one, and the panel cannot reset your password or run a command inside. The only way into the machine is the credential you set. That is the correct property for a box that holds other people's mailboxes.

The second is whether mail works at all. Most cheap hosts block outbound port 25, because a spammer on a shared address block costs them the block's reputation. We keep it open and enforce the terms instead: spam gets the machine suspended, and reverse DNS is under your control so your outbound mail is not flagged for a mismatch. YunoHost's own diagnosis page will tell you in one screen whether SPF, DKIM, DMARC and the PTR are right.

What we do not do is pretend a VPS fixes deliverability by itself. A fresh IP has no history, the large providers grey-list what they do not know, and YunoHost's defaults are good but not magic. Warm the address up, keep the volume honest, and read the diagnosis. Our mail server page goes through the parts that usually break.

YunoHost is based on Debian 12, and so is the image it installs on here, kernel included. That is also why the confidential option stays available: it is the same Debian image every other Blackbox uses, with one extra job at first boot.

Ten minutes from now, a YunoHost admin panel.

Pick a plan, choose YunoHost 12, pay how you like.

Deploy YunoHost

Fair questions

Is YunoHost really pre-installed, or do I run the installer?

Pick "YunoHost 12" as the operating system when you order. The machine boots Debian 12 and runs the official YunoHost installer by itself, unattended, in the first minutes after deployment. When the file /root/YUNOHOST-INSTALLING is gone the install is finished and you complete the post-install wizard in your browser at https://your-ip/. The whole thing takes about ten minutes after the server shows as ready.

Which plan do I need for YunoHost?

YunoHost itself is light: its documentation lists 512 MB of RAM and 16 GB of disk as the floor and recommends 1 to 2 GB. The apps you add are what cost memory. A 4 GB Blackbox Core runs YunoHost with mail, Nextcloud and a few small apps comfortably. Go bigger if you plan on Matrix, video or several users.

Is outbound port 25 open? YunoHost runs a mail server.

Yes. Outbound SMTP on port 25 is not filtered on our Montreal network, and you set your own reverse DNS from the panel, which is what makes outbound mail from YunoHost deliverable. Spam or bulk mail gets the machine suspended under the terms, which is also what keeps the address block clean for everyone else.

Can I use encrypted memory (SEV-SNP) with YunoHost?

Yes. YunoHost 12 runs on our Debian 12 image, so the confidential option is available and on by default. Disk encryption is not offered on this image: the in-place encryption and a ten-minute package install cannot share the same first boot, so we do not pretend they can.

Do I need my own domain?

No. The post-install wizard can register a free subdomain under nohost.me, noho.st or ynh.fr for you, with DNS handled by the YunoHost project. If you own a domain, point it at the server IP first and use it in the wizard. You can add more domains later from the YunoHost admin.

What does Servury know about my YunoHost server?

The IP we assigned, the hostname you chose and the payment. Signup asks for nothing, and on a confidential machine we cannot read its memory or run commands inside it. A mail server does publish a domain, an MX and a PTR record by nature, and those are public whatever host you use.

Can I install YunoHost on a server I already have here?

Yes. Reinstall it from the panel and choose YunoHost 12, which wipes the disk and repeats the unattended install. Or, on any existing Debian 12 machine, run the official one-line installer yourself; it is the same script we run.

How do I back it up?

YunoHost has its own backup system in the admin panel and on the command line, which archives the system settings and every app with its data. Copy the archives off the server; a backup that lives only on the machine it protects is not a backup.

Guides on this

Self-Hosted Apps vs SaaS: Why Running Your Own Nextcloud, Vaultwarden, or Pi-hole Beats Trusting a Third Party What changes when you run your own Nextcloud, Vaultwarden, or Pi-hole instead of trusting a SaaS provider, and how an anonymous VPS closes the last pr Why Developers Are Self-Hosting AI Agents and LLMs Instead of Relying on Cloud AI Platforms Why developers are moving language models and agents onto their own VPS, keeping prompts, documents, and agent memory private instead of sending them Offshore VPS Hosting: How It Works and Who It's For Offshore VPS just means your server is in a different country. The reasons range from privacy to performance. Here's how it actually works, who needs What Is a Warrant Canary and What Does It Mean for Your Hosting Provider? What a warrant canary is, where the practice came from, how to read one, and what it means when a hosting provider's canary goes silent.

Related use cases

Plausible Analytics VPS Self-host Plausible Analytics on your own VPS. Cookieless, GDPR-compliant Google Analytics alternative. Vaultwarden VPS Self-host Bitwarden (Vaultwarden) on a no-KYC VPS. Free Premium features, family-friendly, end-to-end encrypted. Matrix Synapse VPS Self-host a Matrix Synapse server. End-to-end encrypted, federated chat, voice, and video. Nextcloud VPS Self-host Nextcloud to replace Google Drive, Docs, Photos, Calendar, and Contacts with one private suite. Mastodon VPS Run a self-hosted Mastodon instance on your own VPS. Federated, ad-free, no algorithmic feed. Gitea / Forgejo VPS Self-host Gitea or Forgejo on a no-KYC VPS. A lightweight GitHub alternative with full Actions support. Coolify VPS Run Coolify on your own VPS to deploy apps, databases, and services with one click. A self-hosted Vercel/Heroku. n8n VPS Self-host n8n on a no-KYC VPS for unlimited workflows, no n8n Cloud bill.