Self-hosting

The Self-Hosted plan runs the same stack the hosted service runs, in your Azure subscription, under your governance. Setup is guided end to end from your Maester Cloud account: you never have to assemble the infrastructure yourself.

What you'll deploy

One resource group in the region you choose, containing the Maester Cloud web app and API, the Maester Cloud Runner, and Azure Storage for reports, results, history, queues, and supporting tables. Everything stays inside your subscription.

Prerequisites

  • An active Maester Cloud subscription.
  • An Azure subscription where you can create resource groups and assign roles. Setup signs you in to Azure directly, so no CLI is required.
  • A Microsoft Entra admin to consent to the sign-in app (same as hosted).

Deploy

  1. Sign in to your Maester Cloud account and start setup.
  2. Sign in to Azure and Microsoft Graph when prompted, then pick the subscription, region, and name for your instance.
  3. Follow the guided steps. Setup registers the sign-in app in your tenant, creates the resource group, and deploys the stack.

Setup is resumable: if you close the tab partway through, it picks up where you left off.

Custom domain

You can put your own domain in front of your instance: create the DNS record Azure shows you, and it issues and renews the certificate automatically. Use that URL as your app's redirect URI.

Onboard and run your first check

From here the experience matches hosted: sign in, follow the in-portal checklist, and connect your Microsoft Graph tenant. The built-in Maester Cloud Runner then runs your tests for you, and results land in the portal automatically.

Uploading reports yourself with the API uploader script (point -ApiBaseUrl at your portal URL) is on the roadmap, not yet available in the private preview.Roadmap

Staying current

New releases are applied by re-running setup from your account, which updates your instance in place. Deployments are idempotent, and your data (the storage account) is untouched by stack updates. Release announcements go to subscribers by email.