Cloud in a Bottle: self-hosting with one login

A project called Cloud in a Bottle launched on September 5 under AGPL-3.0, and it is aimed at the part of self-hosting nobody solves: the day after you install it. Built by Imbue after six months of private development, it bundles containerized apps, single sign-on across all of them, and a curated catalog — currently 38 open-source applications including Nextcloud, Jellyfin, Forgejo, VaultWarden, Matrix Synapse, and Open WebUI.

Zero telemetry. Runs on your hardware, a VPS, or Imbue's managed service.

What actually happened

The pitch is that self-hosting already exists and is still unapproachable. Not because installs are hard — Docker solved that years ago — but because ten self-hosted apps means ten login screens, ten upgrade paths, and ten different opinions about backups.

Cloud in a Bottle's answer is a platform layer. Apps run in hardened rootless sandboxes. Auth is unified across the catalog. Packaging is deliberately thin: a Dockerfile and a short manifest, so you can add anything the catalog does not carry. Apps can also expose themselves to each other as services — Bifrost, for example, publishes an OpenAI-compatible API that other installed apps can call. That is the interesting bit. Most self-hosting stacks are a pile of isolated containers; this one has an integration story.

The business model is honest about itself: AGPL source, plus a managed option that funds the work.

Why self-hosting matters for your business

We are not going to tell you to move your production stack onto a box in the closet. That is not the read.

The read is that the gap between "rent it" and "run it" is closing, and the arithmetic changed. A small team paying per-seat for file sync, chat, a password manager, a git host, and an LLM front end is paying five subscriptions that each escalate on their own schedule and each hold a copy of your data. The reason to keep renting was always operational cost, not principle. When one login and one upgrade path cover all five, that reason gets thinner.

Two things worth checking before anyone gets excited. AGPL-3.0 is a real license with real obligations if you modify and serve it — read it, don't skim it. And the platform inherits every CVE in 38 upstream projects, so "one login" also means one blast radius. Ask who patches the catalog and how fast.

We build vendor-agnostic systems because portability is leverage. A project like this is worth watching for exactly that reason: it makes the exit cheaper.

Sources: Cloud in a Bottle launch post, Cloud in a Bottle app catalog.