Features

A complete cloud stack behind one API.

Lahijan puts compute, DNS and object storage behind one API and one dashboard, with the audit log and billing you need to run it for real users.

Platform

Everything you need to run a cloud

Three best-of-breed backends, one unified control plane, zero vendor lock-in.

Containers · VMs
Compute
Provision system containers and virtual machines on demand. Full instance lifecycle, profiles, devices, and networks.
Learn more
Authoritative
DNS
Authoritative DNS for your zones, with a records editor that gets out of your way.
Learn more
S3-compatible
Object storage
S3-compatible buckets with per-user credentials. Your apps hit the data plane directly; Lahijan manages policies.
Learn more
WASM · .lahx
WASM extensions
Extend the platform with sandboxed WebAssembly extensions, installed as .lahx packages. Admins approve every requested permission at install time.
Learn more
Append-only
RBAC + audit
Role-based access control with an append-only audit trail. Every privileged action is recorded.
Learn more
Prepaid ledger
PAYG billing
Top up user balances and meter usage per minute. A ledger you can reconcile, not a black box.
Learn more
Natural language
Built-in AI agent
A chat assistant in the dashboard. Ask it to list instances, inspect zones and buckets, or make changes for you. It can only do what your own permissions allow.
Learn more

What each service does

01 / Containers · VMs

Compute

Launch system containers and virtual machines from a shared image catalog.
Profiles, devices, networks, storage pools and snapshots: the full surface, not a simplified subset.
An in-browser console for every instance, with no SSH keys to hand around.

02 / Authoritative

DNS

Host authoritative zones for your own domains.
Edit A, AAAA, CNAME, MX, TXT and more in a records editor built for speed.
Every change is scoped to the tenant that owns the zone and recorded in the audit log.

03 / S3-compatible

Object storage

Create buckets and mint per-user S3 credentials from the portal.
Point any S3 client or SDK at the data endpoint; objects never pass through the control plane.
Manage bucket policies and access keys through the same API as everything else.

04 / WASM · .lahx

WASM extensions

Upload an extension as a single .lahx package.
Each package declares the permissions it needs; an admin approves each one before install.
Extensions run sandboxed in WebAssembly, isolated from the host and from each other.

05 / Append-only

RBAC + audit

Roles and fine-grained permissions for every privileged action.
Sign in with a password, OAuth, OIDC, SAML, TOTP or WebAuthn.
An append-only audit log: rows can be written, never edited or deleted.

06 / Prepaid ledger

PAYG billing

Admins top up user balances; usage is metered per minute and debited.
Every credit and debit is a ledger entry you can reconcile.
Operators set their own unit prices for compute, DNS and storage.

07 / Natural language

Built-in AI agent

Ask in plain language: list instances, inspect a zone, check a bucket.
It acts through the same API and permissions as the signed-in user, never more.
Every action it takes lands in the audit log like any other.

Get started

Run your own cloud today.

Clone the repo, edit the config, bring the stack up. That's it.

Free and open source. No account, no credit card.

Self-host Lahijan Read the docs