What You Actually Need to Self-Host Strapi
Before you can run Strapi in production, you need:
- Node.js (v18, v20, or v22 LTS)
- Database: PostgreSQL, MySQL, or MariaDB
- Server: Minimum 4GB RAM, 2 CPUs (shared or dedicated)
- SSL certificates and domain management
- Backups: Automated daily backups with point-in-time recovery
- Monitoring: Uptime tracking, error logs, performance alerts
- Security patching: Regular updates for Node.js, your database, dependencies, and the Strapi framework itself
- DDoS protection and rate limiting
- CDN or edge caching if you're serving media files globally
That's not a checklist. That's a job description.
Each of these requires someone on your team—or a contractor you hire—to set up, maintain, and monitor. Strapi's own research shows teams self-hosting spend 45-48% more operational time than they would with managed hosting. Security patches alone consume 312-1,300 developer hours per year. At USD 100/hour loaded cost, that's USD 31,200 to USD 130,000 per year in engineering time before you've provisioned a single server.
Annual developer hours on security patches and maintenance (not setup).
Based on Strapi's own cost analysis published June 2026. Infrastructure, monitoring, and backup management add another 45-48% operational overhead on top of that.
Where Your Strapi Self-Hosting Budget Actually Goes
Infrastructure (monthly): USD 6-140 depending on your provider. Use Hetzner and it's cheap. Switch to AWS, GCP, or Azure for scaling, and watch that bill climb to USD 2,500+/month for enterprise deployments. Bandwidth alone can vary 108x (USD 10/month on Hetzner vs. USD 1,080/month on GCP for 10TB outbound).
Developer time (annual): Strapi's official blog estimates 312-1,300+ hours per team member per year on security patches, dependency updates, database migrations, and production troubleshooting. Security patches are not optional. They ship weekly across Node.js, PostgreSQL, Strapi's own code, and every dependency you depend on.
Hidden infrastructure costs: Monitoring, log aggregation (CloudWatch, Datadog, or Sentry), backup storage, SSL certificates (free with Let's Encrypt but labor-intensive to automate), CDN for static content, and DDoS protection if you're handling traffic. Each adds USD 20-500/month depending on scale.
Scaling pain: Your Hetzner VPS worked at 10,000 API requests per month. You grew to 100,000. Now your single server is choking. You either vertically scale (buy bigger hardware; same provider limits) or go horizontal (add load balancing, database replication, session management across nodes). This is where teams discover why Kubernetes exists—and why most teams shouldn't be managing it alone.
Total Cost of Ownership (TCO): For a 5-person team self-hosting Strapi in the US with modest traffic, Strapi's analysis puts annual operational cost at USD 51,200-USD 260,000. Fifty-one percent of that is operations and maintenance, not acquisition. Most self-hosted teams dramatically underestimate this number.
Directus vs Strapi: Architectural Differences Matter
Database-first beats code-first when you need flexibility at scale.
Why Opsily's Managed Directus Wins
You get database-first flexibility without the operational burden.
We handle infrastructure and patching
Server provisioning, database maintenance, security updates, and backups run automatically. Your team focuses on content and workflows, not DevOps. No more 300+ annual hours wasted on patch management.
Database-first architecture for any SQL schema
Connect an existing database—legacy or modern. Directus reads the schema and builds your CMS on top. Strapi locks you into its code-first abstraction. Directus wraps whatever SQL database you already own.
Built-in AI, automation, and analytics
Directus Studio includes native AI assistance (conversational, actionable), visual Flows for no-code automation, and Insights dashboards. These are free features. Strapi requires plugins, custom integrations, or paid vendors to match this.
Built for teams who need reliability
Simple, Transparent Directus Pricing
No surprise infrastructure bills. No labor cost surprises. Your total cost: hosting + the time you actually save.
Loading pricing...
Enterprise-Grade Infrastructure Without the DIY Risk
Stop managing compliance yourself. Directus managed hosting handles the heavy lifting.
GDPR Compliant
Full GDPR compliance built-in. Your data is processed and stored in compliance with EU regulations. No extra configuration needed.
Nightly Automated Backups
Every database is backed up daily with point-in-time recovery. Ransomware, human error, or data corruption: we restore to any moment you choose.
Realtime Uptime Monitoring
99.9% uptime SLA. Redundant infrastructure across multiple data centers. Automatic failover in seconds, not hours.
Encrypted Data in Transit and at Rest
TLS 1.3 for all connections. AES-256 encryption for data at rest. API tokens scoped to collections and roles, not blanket access.
Dedicated Account Support
Your team gets direct access to our infrastructure engineers. For questions about scaling, security, or compliance, we're here to help.
Questions Self-Hosters Ask
Yes and no. Strapi's software is MIT-licensed and genuinely free to download and run. But hosting it requires a server (USD 6-140/month at small scale, USD 2,500+/month if you scale), and operating it requires engineers. Security patches, backups, monitoring, and scaling are all costs you own. Strapi's own research shows self-hosting teams spend 312-1,300 developer hours annually on maintenance and patching. At USD 100/hour, that's USD 31,000-USD 130,000 per year in labor before you've bought a single server. The software is free. The operations cost is not.
Ready to stop paying engineers to manage infrastructure?
Directus Core is free. Managed hosting with Opsily starts at a fraction of your annual self-hosting ops cost. No credit card required to try.