# Cloudron Server Ops > Manage apps on a Cloudron server using the cloudron CLI. Covers authentication, listing, logs, exec, sync/push/pull, backups, env vars, start/stop/restart, and CI/CD integration. Use when the user wants to manage, debug, or operate installed Cloudron apps, or mentions cloudron CLI commands like cloudron logs, cloudron exec, cloudron sync, cloudron backup, or cloudron env. Use when this capability is needed. - Skill: `tomevault-io/cloudron-server-ops` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/cloudron-server-ops` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/cloudron-server-ops/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: DevOps & Infra - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/cloudron-server-ops --- # Cloudron Server Operations The `cloudron` CLI manages apps on a Cloudron server. All commands operate on apps, not the server itself. ## Setup ```bash sudo npm install -g cloudron # install on your PC/Mac, NOT on the server cloudron login my.example.com # opens browser for authentication ``` Token is stored in `~/.cloudron.json`. For self-signed certificates: `cloudron login my.example.com --allow-selfsigned` ## App targeting Most commands require `--app` to specify which app: ```bash cloudron logs --app blog.example.com # by FQDN cloudron logs --app blog # by subdomain/location cloudron logs --app 52aae895-5b7d-4625-8d4c-... # by app ID ``` When run from a directory with `CloudronManifest.json` and a previously installed app, the CLI auto-detects the app (stored as `appId` in the per-directory config). ## Commands ### Listing and inspection ```bash cloudron list # all installed apps cloudron list -q # quiet (IDs only) cloudron list --tag web # filter by tag cloudron status --app # app details (status, domain, memory, image) cloudron inspect # raw JSON of the Cloudron server ``` ### App lifecycle ```bash cloudron install # install app (on-server build or --image) cloudron update --app # update app (rebuilds or uses --image) cloudron uninstall --app cloudron repair --app # reconfigure app without changing image cloudron clone --app --location new-location ``` `cloudron install` and `cloudron update` accept: - `--image ` — use a pre-built Docker image - `--no-backup` — skip backup before update - `-l, --location ` — set the app location - `-s, --secondary-domains ` — secondary domain bindings - `-p, --port-bindings ` — TCP/UDP port bindings - `-m, --memory-limit ` — override memory limit - `--versions-url ` — install a community app from a CloudronVersions.json URL ### Run state ```bash cloudron start --app cloudron stop --app cloudron restart --app cloudron cancel --app # cancel pending task ``` ### Logs ```bash cloudron logs --app # recent logs cloudron logs --app -f # follow (tail) cloudron logs --app -l 200 # last 200 lines cloudron logs --system # platform system logs cloudron logs --system mail # specific system service ``` ### Shell and exec ```bash cloudron exec --app # interactive shell cloudron exec --app -- ls -la /app/data # run a command cloudron exec --app -- bash -c 'echo $CLOUDRON_MYSQL_URL' # with env vars ``` ### Debug mode When an app keeps crashing, `cloudron exec` may disconnect. Debug mode pauses the app (skips CMD) and makes the filesystem read-write: ```bash cloudron debug --app # enter debug mode cloudron debug --app --disable # exit debug mode ``` ### File transfer ```bash cloudron push --app local.txt /tmp/remote.txt # push file cloudron push --app localdir /tmp/ # push directory cloudron pull --app /app/data/file.txt . # pull file cloudron pull --app /app/data/ ./backup/ # pull directory cloudron sync push --app ./local/ /app/data # sync local contents -> remote (changed files only) cloudron sync push --app ./local /app/data # sync local dir itself into /app/data/local cloudron sync push --app file.txt /app/data # sync single file -> remote cloudron sync pull --app /app/data/ ./local # sync remote contents -> local (changed files only) cloudron sync pull --app /app/data ./local # sync remote dir itself into ./local/data cloudron sync push --app ./local/ /app/data --delete # also delete remote-only files cloudron sync pull --app /app/data/ ./local --delete # also delete local-only files ``` A trailing slash on the source syncs its contents; without it, the directory itself is placed inside the destination (rsync convention). Use `--delete` to remove files present only on the destination side. Use `--force` to remove files blocking directory creation. For directory transfers, prefer `cloudron sync`; keep `cloudron push`/`pull` for one-off file copy and stream-oriented use cases. ### Environment variables ```bash cloudron env list --app cloudron env get --app MY_VAR cloudron env set --app MY_VAR=value OTHER=val2 # restarts app cloudron env unset --app MY_VAR # restarts app ``` ### Configuration ```bash cloudron set-location --app -l new-subdomain cloudron set-location --app -s "api.example.com" # secondary domain cloudron set-location --app -p "SSH_PORT=2222" # port binding ``` ### Backups ```bash cloudron backup create --app # create backup cloudron backup list --app # list backups cloudron restore --app --backup # restore from backup cloudron export --app # export to backup storage cloudron import --app --backup-path /path # import external backup ``` Backup encryption utilities (local, offline): ```bash cloudron backup decrypt --password cloudron backup decrypt-dir --password cloudron backup encrypt --password ``` ### Utilities ```bash cloudron open --app # open app in browser cloudron init # create CloudronManifest.json + Dockerfile cloudron completion # shell completion ``` ## CI/CD integration Use `--server` and `--token` to run commands non-interactively. Get API tokens from `https://my.example.com/#/profile`: ```bash cloudron update \ --server my.example.com \ --token 001e7174c4cbad2272 \ --app blog.example.com \ --image username/image:tag ``` ## Global options These apply to most commands: | Option | Purpose | |--------|---------| | `--server ` | Target Cloudron server | | `--token ` | API token (for CI/CD) | | `--allow-selfsigned` | Accept self-signed TLS certificates | | `--no-wait` | Do not wait for the operation to complete | ## Common workflows ### Check and restart a misbehaving app ```bash cloudron status --app cloudron logs --app -l 100 cloudron restart --app ``` ### Debug a crashing app ```bash cloudron debug --app cloudron exec --app # inspect filesystem, check logs, test manually cloudron debug --app --disable ``` ### Backup and restore ```bash cloudron backup create --app cloudron backup list --app # note the backup ID cloudron restore --app --backup ``` ### Set env vars for an app ```bash cloudron env set --app FEATURE_FLAG=true DEBUG=1 # app restarts automatically cloudron logs --app -f ``` --- > Source: [benneic/cloudron-activepieces](https://github.com/benneic/cloudron-activepieces) — distributed by [TomeVault](https://tomevault.io).