Container apps

A container project runs your code as a Kubernetes pod fronted by the PandaStack gateway. Use this type for anything with a server process: HTTP APIs, SSR web apps (Next.js, Nuxt, SvelteKit), background-serving workers, or any app that listens on a port. Containers are built with Railpack or a Dockerfile and reached at https://{name}.pandastack.app (or a custom domain).

How a container is served

At deploy time the worker creates a gateway service in front of your pod. The service is named:

org-{orgId}.custom-{name}.80

This name is created by the worker at deploy time — it is not stored on the project row. In the routing manifest, a container project has a single catch-all function route targeting:

kong://org-{orgId}.custom-{name}.80

Every request that isn’t a redirect, rewrite, or header rule is dispatched to your pod through this route. Because a container has a real server, its redirects are issued as 301 (via a Kong pre-function Lua handler), whereas static redirects are 302.

Listening on a port

Your app must listen on the port PandaStack provides and bind to all interfaces (0.0.0.0), not just localhost. An app that binds only to 127.0.0.1 will not receive traffic from the gateway. Most frameworks read the port from the PORT environment variable; make sure yours does the same. See Environment variables & secrets for how the environment is delivered.

Building a container

You choose how the container is built by setting the language on the create form:

Language	Build method	Required fields
auto	Railpack zero-config buildpacks	none
nodejs	Platform-generated Dockerfile	a start command
python	Platform-generated Dockerfile	build and start commands
go	Platform-generated Dockerfile	build and start commands
docker	The repo’s own Dockerfile	—

auto is the default for auto-detected and one-click deploys — Railpack detects the framework and derives the build and start commands, so no commands are required. See Build & buildpacks for the full framework and language matrix, Node version selection, Dockerfile override, and build caching.

Compute tiers

Containers run on a fixed catalog of compute tiers. The free tier is the default; paid tiers require an active paid plan (the create path checks isOrgPaid, so a raw API caller cannot put a free org on a paid tier).

Tier slug	Label	vCPU	RAM (GB)	$/mo	Free?
free-tier	Free	0.25	0.5	0	yes
standard-tier	Standard	1	2	18.25	no
c1-compute-tier	C1-Compute	2	4	51.10	no
c1-2xcompute-tier	C1-2XCompute	4	8	102.20	no
c2-compute-tier	C2-Compute	6	12	109.50	no
c2-2xcompute-tier	C2-2XCompute	8	16	219.00	no
m1-memory-tier	M1-Memory	1	4	43.80	no
m1-2xmemory-tier	M1-2XMemory	2	8	87.60	no
m2-memory-tier	M2-Memory	2	12	94.90	no
m2-2xmemory-tier	M2-2XMemory	4	24	189.80	no

Full tier details and pricing are on Instance tiers.

Scale-to-zero vs always-warm

How a container scales depends on the plan:

• Free tier — the app uses KEDA scale-to-zero. It runs a single replica that scales down to zero after idle and cold-starts on the next request (a few seconds of latency on the first hit).
• Paid tiers — the app can enable HPA autoscaling, which keeps it always-warm and adds replicas under load.

Scale-to-zero and HPA autoscaling are mutually exclusive: with autoscaling on, the app is always-warm and never sleeps. Both a non-free tier and HPA require an active paid plan. See Autoscaling & scale-to-zero for min/max replicas, target CPU, and cold-start behavior.

Persistent disk

A container can attach a persistent volume. The disk field is a size in GB (a PVC); 0 means no persistent volume. Changing compute — the tier, autoscaling, or disk — triggers a redeploy: the worker re-renders the Helm chart and rolls out the change.

Health and readiness

Your pod is fronted by the gateway service and probed by Kubernetes. Expose a route that returns success when the app is ready so the platform knows when to send traffic. The healthCheckPath field (also settable via pandastack.json) tells PandaStack which path to probe.

Custom domains, routing, and analytics

A container gets https://{name}.pandastack.app and can attach a custom domain (paid). It supports redirects, rewrites, and response headers — for containers these also sync to Kong on the data plane. Analytics and metrics are captured at the gateway.

Cost

Container-hours are metered and billed on paid plans (pro/premium); free-tier containers cost $0 because they scale to zero. See Usage & metering. Free organizations may run up to 5 containers; paid plans are unlimited — see Plans & limits.

Related

• Auto-detect deploys
• Build & buildpacks
• Autoscaling & scale-to-zero
• Environment variables & secrets
• Instance tiers
• Static sites — when you don’t need a server