Self-Hosting Excalidraw on a VPS: The Ultimate Virtual Whiteboard for Remote Teams

The Evolution of Remote Collaboration and the Need for Better Tools

In the modern corporate landscape, remote work is no longer a temporary adjustment; it is a permanent strategic advantage. However, shifting from physical offices to distributed teams has exposed significant bottlenecks in how we brainstorm, design architectures, and collaborate dynamically. In a traditional office setting, teams would naturally gather around a physical whiteboard to map out complex workflows, sketch database schemas, or brainstorm marketing funnels. Replicating that fluid, tactile experience digitally has proven to be a major challenge for many enterprises.

While standard video conferencing tools and text-based project management platforms keep daily operations running, they often fail to capture the spontaneous creativity of a live brainstorming session. This is where digital whiteboards come into play. Among the various solutions available in the market today, Excalidraw has emerged as a standout tool, capturing the hearts of developers, product managers, and system architects worldwide with its signature hand-drawn aesthetic and minimal learning curve.

What is Excalidraw and Why is it Essential?

Excalidraw is an open-source, collaborative virtual whiteboard tool that allows users to sketch diagrams with a distinct, hand-drawn feel. Unlike complex vector graphics software or overly rigid diagramming tools, Excalidraw focuses on speed, simplicity, and intuition. It provides a blank canvas where ideas can be visualized almost as fast as they are conceived. Key features include:

• Infinite Canvas: Never run out of space while mapping out massive system architectures or extensive user journeys.
• Hand-Drawn Aesthetic: The casual, sketch-like appearance removes the pressure of perfectionism, encouraging team members to contribute rough ideas freely.
• Rich Library of Components: Easily access pre-built templates and shapes for cloud architectures (AWS, GCP, Azure), software wireframes, and flowcharts.
• Real-Time Collaboration: Multiple team members can view, edit, and contribute to the same canvas simultaneously with zero latency.

While the cloud-hosted version at Excalidraw.com is highly accessible, relying on third-party SaaS infrastructure presents distinct challenges for enterprise environments, particularly regarding data governance, security, and cost at scale. This brings us to the optimal solution: self-hosting Excalidraw on your own Virtual Private Server (VPS).

The Business Case for Self-Hosting Excalidraw on a VPS

For businesses handling proprietary software architectures, sensitive product roadmaps, or strictly regulated client data, outsourcing visual collaboration data to a third-party server is a substantial risk. Here is why self-hosting Excalidraw on a dedicated VPS is a superior choice for your organization:

1. Absolute Data Privacy and Security Compliance

“Data is the lifeblood of modern enterprise. Protecting where it is stored and how it is processed should be a core priority, not an afterthought.”

When you self-host Excalidraw, every diagram, strategic roadmap, and system vulnerability sketch remains strictly within your private network infrastructure. This is critical for organizations that must comply with rigid data protection frameworks such as GDPR, HIPAA, or local data sovereignty laws. You retain complete ownership of the encryption keys and server access logs.

2. Cost Efficiency and Predictability

Subscription fatigue is a real financial burden for growing companies. Licensing fees for premium collaborative design tools can scale rapidly as your team expands. By hosting Excalidraw on an affordable VPS, your operational costs remain fixed and highly predictable, regardless of whether you have ten or one thousand users accessing the platform.

3. Customization and Enterprise Integration

Self-hosting unlocks the ability to fully customize the application interface to align with your corporate branding. You can integrate custom authentication mechanisms, such as Single Sign-On (SSO), OAuth, or Active Directory, ensuring that only authorized internal personnel can access your collaborative canvases.

Step-by-Step Guide to Deploying Excalidraw via Docker on a VPS

Deploying Excalidraw on your own Linux-based VPS is a straightforward process when utilizing containerization. Below is a comprehensive guide to getting your internal corporate whiteboard system up and running using Docker and Nginx.

Prerequisites

Before beginning the installation, ensure you have the following assets ready:

1. A VPS running a clean installation of a modern Linux distribution (e.g., Ubuntu 22.04 LTS or 24.04 LTS).
2. A domain name or subdomain (e.g., whiteboard.yourcompany.com) pointed to your VPS IP address via an A record.
3. Docker and Docker Compose installed on the host system.

Step 1: System Update and Docker Installation

First, log into your VPS via SSH and update the package repository to ensure all system dependencies are current:

sudo apt update && sudo apt upgrade -y

If Docker is not yet installed on your server, deploy it using the official Docker convenience script:

curl -fsSL [https://get.docker.com](https://get.docker.com) -o get-docker.sh
sudo sh get-docker.sh

Step 2: Configuring the Docker Compose Environment

Create a dedicated directory for your Excalidraw installation to maintain clean server organization:

mkdir -p ~/excalidraw && cd ~/excalidraw

Next, create a docker-compose.yml file using your preferred text editor:

nano docker-compose.yml

Insert the following container configuration into the file. This structure pulls the official, lightweight production image of Excalidraw and exposes it internally on port 8080:

version: '3.8'

services:
  excalidraw:
    image: excalidraw/excalidraw:latest
    container_name: excalidraw_app
    ports:
      - "8080:80"
    restart: always
    environment:
      - NODE_ENV=production

Save the file and exit the editor. Launch the container in detached mode by executing:

docker compose up -d

Step 3: Setting Up Nginx as a Reverse Proxy with SSL

To ensure secure, encrypted connections (HTTPS) for your team, configure Nginx as a reverse proxy. Install Nginx on the host server:

sudo apt install nginx -y

Create a new configuration block for Excalidraw:

sudo nano /etc/nginx/sites-available/excalidraw

Add the following configuration, replacing whiteboard.yourcompany.com with your actual domain name:

server {
    listen 80;
    server_name whiteboard.yourcompany.com;

    location / {
        proxy_pass http://localhost:8080;
        proxy_set_header Host $$host;
        proxy_set_header X-Real-IP $$remote_addr;
        proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $$scheme;
    
        # WebSockets support for real-time collaboration feature
        proxy_http_version 1.1;
        proxy_set_header Upgrade $$http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

Enable the site configuration by creating a symbolic link to the enabled directory, then restart Nginx:

sudo ln -s /etc/nginx/sites-available/excalidraw /etc/nginx/sites-enabled/
sudo systemctl restart nginx

Step 4: Securing the Installation with Let's Encrypt SSL

Protecting data transmission with a valid SSL certificate is mandatory for modern web applications. Utilize Certbot to acquire a free automated certificate:

sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d whiteboard.yourcompany.com

Follow the on-screen prompts to complete the SSL configuration. Certbot will automatically rewrite your Nginx configuration to force all web traffic over secure HTTPS connections.

Optimizing and Maintaining Your Self-Hosted Canvas

Once deployment is successfully finalized, maintaining your instance requires very little overhead. However, implementing a few operational best practices will maximize system longevity and security:

• Automated Backups: Schedule automated snapshots of your VPS to prevent data loss from underlying hardware failures.
• Regular Image Updates: Keep Excalidraw updated with the latest security patches and feature releases by periodically running docker compose pull followed by docker compose up -d.
• Access Control: If Excalidraw is intended exclusively for internal operations, restrict access at the Nginx level using Basic Authentication or deploy it within a corporate Virtual Private Network (VPN) or WireGuard tunnel.

Conclusion: Empowering Your Remote Workforce Securely

Transitioning from third-party software subscriptions to internal self-hosted alternatives is an effective strategy for modern, tech-forward businesses. By hosting Excalidraw on your own VPS, you provide your remote teams with an incredibly agile, responsive, and intuitive visual brainstorming tool, all while reinforcing your corporate security posture and optimizing infrastructure expenditure. Take complete ownership of your team’s digital sandbox today and watch remote collaboration transform from a static chore into an expressive, efficient, and highly secure asset.