Deploy Logto on Sealos

Logto is an open-source identity platform for building sign-in, user management, OIDC/OAuth, SAML, multi-tenancy, and authorization into modern applications.

Tools

Deploy Logto in a few clicks from the Sealos App Store.Run a self-hosted open-source service on Kubernetes-backed infrastructure.Get automatic HTTPS, routing, and resource management from Sealos.Avoid manual YAML while keeping control of the deployed workload.

Official Website GitHub README

sealos.io

Why deploy on Sealos

Sealos makes deploying any app effortless, secure, and production-ready. From one-click launch to ongoing operations, we handle the heavy lifting so you can focus on what matters.

One-Click Deploy

Compute

Networking

Storage

Security

Observability

Your Application is Live

One-Click Deployment

Deploy any app template in seconds. No compose setup, manual configure, and go live.

Managed Kubernetes Reliability

Built on Sealos Managed Kubernetes for high availability, auto-scaling, and self-healing by default.

Automatic HTTPS & Security

Every deployment includes a secure domain with automatic SSL. We handle certificates and text protection for you.

Persistent Storage

Attach persistent volumes with ease. Your data stays safe, durable, and always accessible.

Scale when needed

Adjust resources as your app grows, no downtime required.

You Get the Whole Stack

Sealos provisions and connects every resource your application needs. Everything is ready to use.

One-click, fully provisionedSecure by defaultProduction ready

App Service

Your application is running and ready to serve requests.

Public HTTPS URL

Secure, global endpoint to access your application.

Database

Managed database instance for your application.

Persistent Volume

Durable storage for uploads and application data.

Environment Variables

Configuration and secrets injected securely into your app.

Logs & Metrics

Centralized logs and basic metrics are enabled.

README

README.md

Deploy and Host Logto on Sealos

Logto is an open-source identity platform for modern applications. It provides sign-in and sign-up experiences, user management, OIDC/OAuth 2.0, SAML, multi-tenancy, and authorization from a self-hosted control plane.

What You Get

Logto 1.40.1 running from the fixed svhd/logto:1.40.1 image.
A dedicated PostgreSQL database created and initialized by the template.
Two public HTTPS endpoints: one for application authentication traffic and one for the Admin Console.
Automatic database creation, seed, and alteration deployment during first startup.

Requirements

A Sealos account.
No external database is required; this template provisions PostgreSQL for you.

Deploy on Sealos

Open the Logto template on Sealos.
Click Deploy Now and keep the generated app name and domain, or customize them before deployment.
Wait until the Logto app and PostgreSQL database are both running.
Open the Admin Console URL shown in the Sealos app details.

First Registration and Login

Logto exposes two URLs:

Admin Console: https://${{ defaults.app_host }}-admin.${{ SEALOS_CLOUD_DOMAIN }}
Core/Auth endpoint: https://${{ defaults.app_host }}.${{ SEALOS_CLOUD_DOMAIN }}

On the first launch, open the Admin Console URL. The welcome page lets you click Create account to create the initial administrator account with a username and password. The open-source edition allows this initial account creation only once. After the administrator account is created, return to the Admin Console and use Sign in.

Use the Core/Auth endpoint as the issuer and redirect target base when connecting your own applications to Logto through OIDC/OAuth.

Post-Deployment Checklist

Create the first administrator account from the Admin Console.
Configure your application redirect URIs in Logto.
Keep both the Core/Auth endpoint and Admin Console endpoint on HTTPS.
Review Logto's official documentation before enabling production identity flows.