{"id":1871,"date":"2026-09-05T09:35:51","date_gmt":"2026-09-05T04:05:51","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/how-to-host-pocketbase-backend-single-binary-vps\/"},"modified":"2026-09-05T12:58:33","modified_gmt":"2026-09-05T07:28:33","slug":"how-to-host-pocketbase-backend-single-binary-vps","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/how-to-host-pocketbase-backend-single-binary-vps\/","title":{"rendered":"How to Self-Host PocketBase on Ubuntu VPS (Lightweight Realtime SQLite Backend)"},"content":{"rendered":"

Why PocketBase Is the Ultimate Micro-Backend for Developers<\/h2>\n

Modern web and mobile application development often gets bogged down in microservice complexity: configuring separate PostgreSQL database instances, standing up Redis caches, setting up OAuth authentication microservices, provisioning AWS S3 buckets, and managing separate REST\/GraphQL API gateways. For solo developers, startups, mobile app creators, and MVPs, this operational overhead is overwhelming.<\/p>\n

PocketBase<\/strong> is an open-source, all-in-one backend packaged as a single standalone Go binary<\/strong>. Featuring an embedded SQLite database with WAL (Write-Ahead Logging) mode, real-time WebSocket event broadcasting, built-in user authentication (with OAuth2 providers like Google, GitHub, Apple), S3\/local file storage, and an elegant visual administrative dashboard, PocketBase runs comfortably on an entry-level $3\/month VPS while consuming less than 15MB of idle RAM.<\/p>\n

In this technical tutorial, we will configure PocketBase as a systemd background service on Ubuntu 24.04\/22.04 LTS, secure the administrative web portal behind an Nginx reverse proxy with SSL, enable real-time WebSockets, and implement automated daily database snapshot backups.<\/p>\n

Step 1: Downloading and Installing the PocketBase Binary<\/h2>\n

PocketBase requires no external database daemons or complex language runtimes. Download the compiled Linux binary directly:<\/p>\n

# Create dedicated directory and download binary\nsudo mkdir -p \/var\/www\/pocketbase\ncd \/tmp\ncurl -LO https:\/\/github.com\/pocketbase\/pocketbase\/releases\/download\/v0.22.14\/pocketbase_0.22.14_linux_amd64.zip\n\n# Unzip binary and place into system PATH\nsudo apt update && sudo apt install -y unzip nginx certbot python3-certbot-nginx\nunzip pocketbase_0.22.14_linux_amd64.zip\nsudo mv pocketbase \/usr\/local\/bin\/\nsudo chmod +x \/usr\/local\/bin\/pocketbase\n\n# Verify PocketBase CLI\npocketbase --version<\/code><\/pre>\n
Step 2: Creating a Dedicated System User and Data Directory<\/h2>\n
For strict security isolation, never run web services as root:<\/p>\n
# Create dedicated system user\nsudo useradd --no-create-home --shell \/bin\/false pocketbase\nsudo chown -R pocketbase:pocketbase \/var\/www\/pocketbase\nsudo chmod 750 \/var\/www\/pocketbase<\/code><\/pre>\n
Step 3: Configuring Systemd Service Daemon<\/h2>\n
Create a systemd unit at \/etc\/systemd\/system\/pocketbase.service<\/code> to ensure PocketBase starts on server boot and recovers automatically from errors:<\/p>\n
[Unit]\nDescription=PocketBase All-In-One Realtime Backend\nAfter=network.target\n\n[Service]\nUser=pocketbase\nGroup=pocketbase\nType=simple\nWorkingDirectory=\/var\/www\/pocketbase\nExecStart=\/usr\/local\/bin\/pocketbase serve --http=127.0.0.1:8090 --dir=\/var\/www\/pocketbase\/pb_data\nRestart=always\nRestartSec=3\nLimitNOFILE=65535\n\n[Install]\nWantedBy=multi-user.target<\/code><\/pre>\n
Enable and start the service daemon:<\/p>\n
sudo systemctl daemon-reload\nsudo systemctl enable --now pocketbase\nsudo systemctl status pocketbase --no-pager<\/code><\/pre>\n
Step 4: Nginx Reverse Proxy with Real-Time WebSockets & SSL<\/h2>\n
Expose the administrative UI and API endpoints over HTTPS by creating \/etc\/nginx\/sites-available\/pocketbase.example.com<\/code>:<\/p>\n
server {\n    listen 80;\n    server_name pocketbase.example.com;\n\n    client_max_body_size 50M;\n\n    location \/ {\n        proxy_pass http:\/\/127.0.0.1:8090;\n        proxy_http_version 1.1;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n        proxy_read_timeout 300s;\n    }\n}<\/code><\/pre>\n
Enable the virtual host and acquire a free Let’s Encrypt SSL certificate:<\/p>\n
sudo ln -s \/etc\/nginx\/sites-available\/pocketbase.example.com \/etc\/nginx\/sites-enabled\/\nsudo nginx -t && sudo systemctl reload nginx\nsudo certbot --nginx -d pocketbase.example.com<\/code><\/pre>\n
Step 5: Automated Daily SQLite Database Backup Script<\/h2>\n
Because SQLite stores all data in a single file (data.db<\/code>), creating reliable, consistent backups during active writes is trivial using SQLite’s online backup API via PocketBase CLI:<\/p>\n
# Create automated backup cron script (\/usr\/local\/bin\/backup-pocketbase.sh)\n#!\/bin\/bash\nset -e\nBACKUP_DIR=\"\/var\/backups\/pocketbase\/$(date +%Y%m%d)\"\nmkdir -p $BACKUP_DIR\n\n# Create atomic SQLite snapshot\n\/usr\/local\/bin\/pocketbase backup create --dir=\/var\/www\/pocketbase\/pb_data\n\n# Move and compress zip snapshot\nmv \/var\/www\/pocketbase\/pb_data\/backups\/*.zip $BACKUP_DIR\/\nfind \/var\/backups\/pocketbase\/ -type d -mtime +30 -exec rm -rf {} +\necho \"PocketBase atomic backup completed successfully!\"<\/code><\/pre>\n
PocketBase vs Supabase vs Firebase Comparison<\/h2>\n\n\n\n\n\n\n\n
Feature \/ Spec<\/th>\nPocketBase<\/th>\nSupabase<\/th>\nGoogle Firebase<\/th>\n<\/tr>\n<\/thead>\n
Architecture<\/strong><\/td>\nSingle Go Binary + SQLite<\/strong><\/td>\n11 Docker Containers + Postgres<\/td>\nProprietary Cloud SaaS<\/td>\n<\/tr>\n
Idle RAM Footprint<\/strong><\/td>\n~15 MB RAM<\/strong><\/td>\n~1,200 MB RAM<\/td>\nN\/A (Managed Cloud)<\/td>\n<\/tr>\n
Backup Simplicity<\/strong><\/td>\n1 Single .db file copy<\/strong><\/td>\npg_dumpall SQL export<\/td>\nCloud snapshot exports<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Leveraging PocketBase JavaScript \/ Go Hooks & Extensibility<\/h2>\n
While PocketBase provides an intuitive no-code admin dashboard for creating collections, user authentication, and defining field rules, developers can write custom backend business logic using embedded JavaScript PB hooks in pb_hooks\/<\/code>:<\/p>\n
\/\/ pb_hooks\/main.pb.js - Custom API Endpoint & Event Interceptor\nrouterAdd(\"GET\", \"\/api\/v1\/custom-stats\", (c) => {\n    const totalUsers = $app.dao().findTotalRowsByFilter(\"users\", \"verified = true\");\n    return c.json(200, {\n        \"status\": \"healthy\",\n        \"verified_users\": totalUsers,\n        \"timestamp\": new Date().toISOString()\n    });\n});\n\n\/\/ Automatically trigger welcome email upon new user registration\nonModelAfterCreate((e) => {\n    if (e.model.tableName() === \"users\") {\n        $app.newMailClient().send({\n            from: { address: \"no-reply@cpanelfree.com\", name: \"CpanelFree Cloud\" },\n            to: [{ address: e.model.get(\"email\") }],\n            subject: \"Welcome to our platform!\",\n            html: \"Thank you for registering on our high-speed infrastructure.\"\n        });\n    }\n}, \"users\");<\/code><\/pre>\n
Configuring S3-Compatible Object Storage for Uploads<\/h2>\n
If you prefer storing user file uploads on S3 object storage rather than local VPS SSD storage, configure S3 settings directly within the PocketBase Admin UI under Settings > Files storage > Use S3 storage<\/strong>:<\/p>\n