selfhost.directory

The index of self-hostable projects — ranked, categorized and served with live updates.
Own your data and stop giving it to big tech.

sandboxd logo

Self-host sandboxd

v0.3.22

Open-source AI app builder with isolated sandboxes

BetaOpen SourceMIT
Updated8 hours ago
LanguageGo
Setup difficultyModerate
Stars
975
CPU
2 vCPU
RAM
4 GB
Port
9000 (Control plane API (internal container port))
Requires
Docker Compose plugin, Docker Engine, Traefik
Install with Docker Compose
Creating an app from a prompt in the sandboxd consoleRunning n8n as a one-click app in sandboxdDriving sandboxd from the API/CLI

What is sandboxd?

sandboxd is an open-source AI application builder you run on your own hardware. It creates isolated containers for each project, each reachable through its own live preview link. Unused containers automatically pause and resume when needed. A browser-based console lets you chat with AI coding agents, edit files, review changes, and push to Git. A full REST API enables programmatic control. Supported agents include OpenCode (with a free tier) and Claude Code. You can start from a prompt, launch one of 80+ pre-packaged open-source apps, import a public Git repository, or use a framework starter. The stack is intentionally minimal: a Go control plane, Docker for containers, Traefik for routing, and SQLite for state — no Kubernetes or external database needed. Setup takes one command on Linux; macOS works through Docker Desktop. The code is MIT licensed with optional paid cloud tunneling and managed hosting services.

Should you self-host sandboxd?

sandboxd scores 57/100 on selfhost.directory (how scoring works) and ranks #32 of 125 in AI. It has 975 GitHub stars.

It shipped 5 stable releases in the past year. The latest, v0.3.22, came out on 12 October 2026. New versions land roughly every 3 weeks.

Setup is moderate: expect some configuration beyond a single command. It is MIT-licensed and written mostly in Go.

Its closest alternative on selfhost.directory is OpenDesign (83/100, 104 542 stars). It scores higher overall, so compare the two before you pick. See sandboxd vs OpenDesign side by side.

Features

  • AI Coding Agents
  • App Store
  • Credential injection proxy
  • Encrypted secrets
  • Git Integration
  • gVisor supportOpt-in via SANDBOXD_RUNTIME=runsc
  • In-place upgrades
  • Isolated Sandboxes
  • Live preview URLs
  • One-command install
  • REST API
  • Runtime presets
  • Snapshots and rollback
  • Web ConsoleOptional — engine runs headless without it

sandboxd README

How to install sandboxd

Install sandboxd with Docker Compose

Docker Engine + Compose plugin, git

curl -fsSL https://raw.githubusercontent.com/tastyeffectco/sandboxd/main/install.sh | bash

Alternative: git clone and run locally

git clone https://github.com/tastyeffectco/sandboxd.git cd sandboxd ./install.sh

Requires Docker Engine + Compose plugin on Linux. macOS via Docker Desktop is best-effort. Runs on amd64 and arm64.

How to configure sandboxd

  • HTTP_PORT80Host port Traefik listens on

    Host port Traefik listens on

  • PREVIEW_DOMAINlocalhostDomain preview URLs hang off. localhost needs no DNS/TLS

    Domain preview URLs hang off. localhost needs no DNS/TLS

  • PREVIEW_ENTRYPOINTwebTraefik entrypoint for previews (websecure for TLS)

    Traefik entrypoint for previews (websecure for TLS)

    values: web, websecure

  • PREVIEW_HOST_STYLEnestedHostname layout under PREVIEW_DOMAIN

    Hostname layout under PREVIEW_DOMAIN

    values: nested, flat

  • PREVIEW_TLSfalseServe previews over HTTPS from Traefik

    Serve previews over HTTPS from Traefik

    values: true, false

  • SANDBOXD_API_AUTH_DISABLEDfalseDisable API authentication (not recommended for production)

    Disable API authentication (not recommended for production)

    values: true, false

  • SANDBOXD_API_TOKENSBootstrap API keys (NAME=VALUE, comma-separated)

    Bootstrap API keys (NAME=VALUE, comma-separated)

  • SANDBOXD_CONSOLE_IMAGEsandboxd-console:0.3.0Console image

    Console image

  • SANDBOXD_CONTROL_PLANE_IMAGEsandboxd-control-plane:0.3.0Control plane image

    Control plane image

  • SANDBOXD_DEFAULT_AGENTopencodeDefault coding agent for tasks

    Default coding agent for tasks

    values: opencode, claude-code

  • SANDBOXD_IDLE_THRESHOLD_SECONDS2100Idle window before a sandbox is stopped to free RAM

    Idle window before a sandbox is stopped to free RAM

  • SANDBOXD_IMAGEsandboxd-base:0.3.0Base image each sandbox boots from

    Base image each sandbox boots from

  • SANDBOXD_NETWORKsandboxd_netDocker network sandboxes join

    Docker network sandboxes join

  • SANDBOXD_OPENCODE_ZEN_PATHzenOpenCode Zen endpoint (zen = pay-as-you-go, zengo = subscription)

    OpenCode Zen endpoint (zen = pay-as-you-go, zengo = subscription)

    values: zen, zengo

  • SANDBOXD_RUNTIMEContainer runtime for sandboxes (empty = runc, runsc = gVisor)

    Container runtime for sandboxes (empty = runc, runsc = gVisor)

    values: runc, runsc

  • SANDBOXD_SECRETS_KEYauto-generatedMaster key for encrypting sensitive app config/secrets at rest (base64 of 32 bytes)

    Master key for encrypting sensitive app config/secrets at rest (base64 of 32 bytes)

  • SANDBOXD_TELEMETRYenabledAnonymous telemetry (set to 'off' to disable)

    Anonymous telemetry (set to 'off' to disable)

    values: off

sandboxd releases & version history

More in PaaS

Rate this project

Click to rate — no account needed.

0 comments

Posting as guest
Loading comments…