You can switch distributions later by reinstalling the server. Reinstalling
erases the disk, but the server keeps its name, IP addresses and SSH keys.
Loading images…
One-click application images from the marketplace. Launch one like any OS.
Pre-configured agent images are on the roadmap. For now, launch
any OS and install your agent of choice yourself.
Loading images…
Booting from an uploaded ISO is not available yet — it is tracked
for a future release. Uploaded images are listed here for reference.
Loading plans…
Custom build
Specify exact CPU, RAM and storage
Inbound free · overage throttled, not billed
Configure →
vCPUs2 vCPU
1816
RAM4 GB
512MB32GB64GB
Storage50 GB
10GB500GB1TB
Need larger instances? Contact support for dedicated or high-capacity deployments.
Estimated cost
£9.99/mo
£0.014/hr
Loading SSH keys...
Selected organisation keys are injected during first boot. Platform console access is always injected separately.
Public https clone URLs only — no credentials, tokens, ? or # in the URL. Clones once into /opt/app at first boot; reinstall does not repeat it, and a failed clone is not reported here.
Letters, numbers and hyphens only. No spaces.
Shown in API responses; helps you identify instances later.
Comma-separated labels for filtering instances later.
Automated backups
Weekly or daily plans, priced as a percentage of the instance. Each plan fixes its retention.
from 10%/mo
Network
Plan port speed included · plan transfer allowance included · outbound throughput limited to 10 Mbps after the allowance, never billed for overage.
On-demand DDoS protection included.
Backed by a UK datacentre provider with baseline on-demand network-layer DDoS protection. Always-on or higher-capacity protection is available only by written agreement.
10 Gb networking is a paid upgrade and will appear here once pricing is configured.
Loading infrastructure details…
·United Kingdom·Typical ready time: about 1 minute.·You'll get an email when it's live.
Networks
🌐
Loading…
Public IP Addresses
Available
—
in pool
Assigned
—
to instances
Reserved
—
infrastructure
Utilisation
—
of pool
Assigned IPs
Address
Status
Instance
Actions
Reassign IP Address
Moving to a different VM updates the network mapping after the target private IP is discovered and sync completes.
The internal IP of the target VM on your project network.
PTR Records
Reverse DNS (PTR)
When an instance's name is a fully-qualified domain name (e.g. mail.example.com),
the platform automatically sets the PTR record for its assigned public IPv4 and tenant IPv6
addresses to that name. Rename the instance to update or clear these records — no manual editor needed.
Address
PTR hostname
Instance
Firewall / Security Groups
Security GroupsPer-VM firewall rules — control inbound and outbound traffic
🛡️
No firewall enabled for this VM
Enable a security group to control inbound and outbound traffic with custom rules.
Inbound Rules0
No inbound rules — all incoming traffic is blocked
Outbound Rules0
No outbound rules — all outgoing traffic is allowed by default
Network ACLs & Cross-Project PeeringAllow traffic between two of your project networks
By default all project networks are fully isolated from each other. Add a peering to allow VMs in different projects to communicate directly over your private network.
Source Project
Destination Project
Protocol
Port
Created
Port Forwarding & NATDisabled by default — use assigned public IPs and firewall rules
Type
WAN IP
WAN Port
Target IP
Target Port
Protocol
Description
Add Inbound Rules
🌍 Anyone
Open to the internet
🏠 Specific IP / CIDR
Restrict to an address
Add Network Peering
Choose which of your other projects to peer with. Both projects must already have a private network.
Add NAT / Port Forward Rule
↪ Port Forward
Forward a specific port on a public IP to a private VM
⇄ 1:1 NAT
Map an entire public IP directly to a private VM
VPN Access
WireGuard VPN
Create WireGuard credentials for private network access when the VPN service is available for your account and project.
You'll receive a .conf config file — import it into the WireGuard app on any device.
WireGuard VPN
VPN access is not available right now.
WireGuard credentials created
Username:
VPN IP:
Created:
Your WireGuard config
Save this config now — your private key is only shown once.
ISO Library
Available images
—
platform templates
Platform OS images
Name
Format
Size
Your uploaded ISOs
Name
Size
Uploaded
Actions
SSH Keys
How SSH key injection works
Add your public key here, then select it when launching an instance.
It is added to the instance at first boot. SSH works once the instance has finished starting
and you have a reachable public IP, VPN, or private-network path.
Your keys
Name
Fingerprint
Added
Actions
Team
— — manage who can access this organization and its projects.
Invite by BareMeta username — the person must already have an account.
You have read-only access to this list.
Members
Username
Email
Role
Joined
Two-factor
Last sign-in
Actions
Organization activityAdmin audit log for this org
Security alerts
Owners are emailed when one of these happens. Only an owner can switch an alert off, and every switch is recorded below.
Time
User
Action
Resource
IP
Loading…
Resource limits
Early access
Monthly spending cap
Loading…
Limits and usage
Resource
Scope
Usage
Status
Loading…
Opens a support ticket — tell us what you need raised and why.
Account Settings
Change PasswordUpdate your login password
Two-Factor AuthenticationProtect your account with an authenticator app
2FA is not enabled. Add an extra layer of security using Google Authenticator, Authy, or any TOTP app.
Scan this QR code with your authenticator app, then enter the 6-digit code to confirm.
Can't scan? Enter this key manually:
2FA enabled! Save these backup codes
If you lose access to your authenticator, use one of these codes to log in. Each code works once.
ActiveYour account is protected with two-factor authentication.
Enter your password and current 2FA code to disable two-factor authentication.
Change EmailUpdate the email address associated with your account
Close AccountLeave safely without orphaning services
To close your BareMeta account, contact support. We will help you export or delete servers, settle billing, and remove access safely.
The button below only deletes your user login. It does not delete organisations, servers, backups, billing records, or audit records. If you are the sole owner of an organisation, transfer ownership or close that organisation first.
Billing records and legally required records are retained as described in the Privacy Policy.
Vote for the features you want BareMeta to build. Popular ideas help us prioritise the roadmap.
Loading…
My submissions
Custom suggestions you have sent us. We triage these internally and may publish the best ones to the board above.
Loading…
Support
Your tickets
Open
—
In Progress
—
Waiting on you
—
Resolved
—
Subject
Status
Priority
Category
Replies
Updated
Loading…
Suggest a feature
New Support Ticket
API Keys
Use API keys to authenticate programmatic requests. Pass the key in the
X-API-Key
request header. Keys are scoped to this organisation and cannot manage human account security, API keys, SSH keys, VPN credentials, interactive VM access, organisations, or platform admin endpoints. The secret is shown once at creation.
Credit never expires. Unused balance is refunded on request.
Estimated this month
Usage (projected)—
Account credits—
Estimated due—
Account credits
Description
Initial
Remaining
Expires
This month
—
estimated
CPU hours
—
this month
Bandwidth used
—
total
Active servers
—
running now
Usage by server
💳
No usage data yet
Usage is recorded hourly.
Cost breakdown
Project
Resource type
Cost
Monthly spending cap
No spending cap set. Your account will not be throttled based on spend.
Estimated spend this month0%
£0.00£0.00 cap
Spending cap reached — VMs throttled to 1 Mbps. Service returns within about an hour once this month's spend is below the cap: at the next billing cycle, or sooner if you raise the cap. Removing the cap does not restore service.
£
At 80%: receive an email warning. At 100%: all VMs throttled to 1 Mbps for the rest of the month.
Payment method
Autopay on
No card saved. Adding a card saves it as your default payment method and enables automatic monthly billing.
Visa ending 4242 · 12/27
Backup payment method
Saved for future use. Automatic retry on this card when the primary fails is not available yet.
No backup card saved.
—
Billing details
Required for invoicing
Printed on invoice PDFs. Only organisation owners can edit.
InvoicesMonthly invoices — click Pay Now to settle via card
🧾
No invoices yet
Invoices are generated on the 1st of each month.
Bandwidth policy
Starter
1 TB
included/mo
Small
1 TB
included/mo
Medium
2 TB
included/mo
Large
3 TB
included/mo
Inbound traffic is free and not metered. After your outbound allowance is exceeded, throughput is throttled to 10 Mbps until the next billing cycle. No overage charges.
Invite team member
Enter the BareMeta username of someone who already has an account. They will gain access to all projects in this organization.
Create API Key
Copy your API key — it won't be shown again
Use in requests: X-API-Key: <your key>
📸 Snapshots —
Snapshot limit reached (max 3 per VM). Delete an existing snapshot to create a new one.
Loading…
Export Disk Image
Download a single disk image file for this VM.
Good for off-site archives or migrating elsewhere.
Limit: 2 successful exports per VM per calendar month (failed attempts do not count).
For restore into this project, use managed Backups.
Consistency note: The export runs while the VM is running.
For a strictly consistent image, stop the VM first. Large disks can take several minutes;
the download link appears once conversion completes.
Loading recent exports…
Enable automated backups
Backups
Nightly encrypted backups to off-host storage. Restore any backup as a new VM in one click.
Backups not enabled for this instance.
Loading…
Assign Public IP
Leave on auto to let the platform pick the next available address.
Upload ISO
Max 12 GB · .iso files only · 10 ISOs per organisation
Add SSH Public Key
Get your public key: cat ~/.ssh/id_ed25519.pub
Instance Console
— reconnected —
console disconnected
Server Metrics
CPU Activity
RAM Usage
Monthly Bandwidth
0 GB used0%
Plan transfer included/mo
No metrics data yet — data is collected hourly.
Danger zone
This erases the disk.
Everything stored on this instance is destroyed and replaced with a fresh
install. There is no undo — take a backup or snapshot first if you need
anything off it.
The instance keeps its name, IP addresses, firewall rules and SSH keys.
Your keys are re-applied to the new install, so you can log back in the
same way once it finishes.
Delete Instance
This permanently destroys the instance.
The disk, its data, and the instance itself are deleted. There is no
undo — take a backup first if you need anything off it.
Nothing blocks deletion.
Power
Restart the instance. It restarts cleanly and keeps its IP and disk.
We'll ask the instance to shut down first. If it has not stopped after 15 seconds, we force it off.
Billing continues while the instance is stopped because disk and IP stay allocated. Delete the instance to stop all charges.
The public IP and data on disk are retained.
Reset Instance Password
Uses the BareMeta guest agent and works without network access.
Requires the agent to be installed inside the instance.
Resize Server
Disk can be increased while running. CPU and RAM require the server to be stopped.
GB
Current: — GB. Grow the filesystem inside the OS if it does not expand automatically.
Estimated monthly price—
BareMeta has been updated. Refresh browser
Launching
Your VM is booting now. SSH usually accepts connections within 1–2 minutes. You can safely close this window — the server keeps launching in the background.
Save these credentials
The password is for the browser console — SSH is key-only. You will be asked to choose a new password on first login. The password will not be shown again.
ubuntu
Open the browser console from the server's page to use it. The first login prompts you to set a new password.
Switch Tenant Context
Select the organization and project context for your dashboard session.
Create a separate environment with its own private network. Requires org admin access.