What's new in Gheima

Subscribe with Atom

1. Nov 6, 2026Platform

   One storage pool, and a database on Free

   On current plans, buckets, managed databases and persistent volumes share one storage pool: 15 GB on Dev, 70 GB on Pro, 300 GB on Team and 1 TB on Agency. When the pool is full, new buckets, databases and volumes are refused and new uploads stop; what is stored stays readable, and databases and volumes keep accepting writes. Free now includes one Postgres database of up to 512 MB, with no backups, removed after 60 days without a connection and 14 days’ notice.

2. Nov 6, 2026Platform

   Residency is the region, not an add-on

   Every plan now places new workloads in Casablanca, so the paid residency tiers are retired. The /maroc page redirects to /security, which sets out what the ma-1 residency commitment covers and what it does not.

3. Nov 6, 2026Platform

   Renewal reminders a month ahead

   We email you 7, 3 and 1 days before a paid period ends, and 35 days before on any plan paid for longer than a month, such as a yearly one.

4. Nov 6, 2026Security

   Throwaway addresses cannot sign up

   New accounts are refused for disposable email domains and for aliases of an inbox that already has an account, and sign-in links are capped per inbox.

5. Nov 4, 2026Platform

   New prices, and the overage rates in public

   New plans sell at 90 MAD (Dev), 250 MAD (Pro), 600 MAD (Team) and 1,500 MAD (Agency) a month, with memory pools and bandwidth resized to match: 50, 250, 500 and 1,000 GB of bandwidth. An account that renews the plan it already has keeps the price and limits it bought. The pricing page now lists per-plan MySQL and MongoDB caps and the overage rates: 1.00 MAD per GB of bandwidth from Casablanca, 0.10 MAD per build minute and 1.00 MAD per GB of storage a month.

6. Nov 3, 2026Platform

   Every plan runs in Casablanca

   New services, databases and buckets on every plan now default to the Casablanca region (ma-1), where data at rest stays in Morocco. MySQL, MongoDB and Meilisearch run there too, and idle Free services sleep and wake in Casablanca as they did in the EU. Paid plans moved on 2 November and Free and School on 3 November; the EU region (eu-1) takes nothing new.

7. Oct 28, 2026School

   Contract limits for bootcamps

   A school contract can now override the plan limits account by account, give each student their own monthly build minutes so one push loop cannot spend the class pool, and give graduates a grace period before their resources are reclaimed.

8. Oct 23, 2026Platform

   Private beta

   New accounts are by invitation while Gheima is in private beta. Request an invite at hello@gheima.ma; anyone invited to a team can still sign up with the invited address.

9. Oct 23, 2026Security

   Encrypted offsite backups and wider restore drills

   Offsite backup copies are now encrypted before they leave the node, and decrypted on restore. MySQL, MongoDB and object-storage backups join Postgres in the automated restore drill, each with its own staleness alert.

10. Oct 23, 2026Platform

    Fair build queue and a shared memory pool

    A newer push now supersedes a queued deploy of the same service, concurrent builds are capped per account, and duplicate push webhooks are dropped. Each plan has an account-wide memory pool, new services are sized to fit what is left of it, and Free web services sleep by default after 30 minutes idle.

11. Oct 23, 2026Platform

    Credit notes for refunds

    A refund now issues a numbered credit note, voids the invoice it reverses, and ends the paid period.

12. Oct 17, 2026Platform

    Hosted MCP server, CLI binaries and one-off runs

    Connect Claude, Cursor or any MCP client at gheima.ma/mcp: you sign in through the browser and choose read only or read and write. The CLI ships as standalone binaries with install.sh and a Homebrew formula, and `gheima run <service> -- <cmd>` runs a one-off command and exits with its code.

13. Oct 17, 2026Platform

    Database restores, Postgres TLS and faster rollbacks

    Restore a snapshot into a new standalone database. Managed Postgres hands out verifying TLS connection strings, with per-driver snippets. Rolling back now redeploys the stored image instead of rebuilding it.

14. Oct 17, 2026Platform

    Bank transfer, commit statuses and crash alerts

    Pay for a plan by bank transfer with a pro-forma invoice. Deploys and previews post commit statuses to GitHub. Webhooks gain deployment.succeeded and deployment.failed. Owners are notified when a live service crash-loops or is killed for memory, /status has an Atom incident feed, and a service can be created from any public image.

15. Oct 16, 2026Platform

    The API moves to api.gheima.ma

    The public API is served at api.gheima.ma/v1, and the CLI, SDK and MCP server use it by default. gheima.ma/api/v1 keeps working.

16. Oct 4, 2026Platform

    Capped prepaid overage on plans

    Dev, Pro, Team and Agency can go past bandwidth, build-minute and storage allowances up to a monthly overage budget you set, paid only from prepaid wallet credit and never billed afterwards. The budget starts at 0 MAD. At the limit, builds are refused and storage turns read-only; nothing is deleted or stopped, and traffic is never cut.

17. Oct 4, 2026Security

    Write-only secrets and env history

    Mark a service or env-group variable as secret and no surface will ever reveal it again, while deploys still receive it. Every env and env-group change is now kept in a history (names only, never values), with rollback from the dashboard, API, CLI, SDK and MCP.

18. Sep 30, 2026Platform

    Data residency as capacity tiers

    Data residency in Casablanca is now four tiers on top of Team or Agency (Starter, Business, Scale and Dedicated), each a memory and CPU budget in the region with its own outbound-traffic allowance. A tier is only sold when the region has room for it, checked before payment.

19. Sep 29, 2026Platform

    Sign the CLI in through the browser

    `gheima login` now opens the browser and approves the CLI with a device code, instead of asking you to paste an API key.

20. Sep 28, 2026Platform

    Everything in the dashboard, over the API

    Every dashboard capability now has a public API operation, billing included, and the CLI can reach every one of them. An MCP server ships alongside, with writes and credential reads off by default. Writes honour an Idempotency-Key, so a retried request cannot act twice.

21. Sep 22, 2026Security

    Per-region encryption keys

    A workload’s secrets (service environment variables, managed-database credentials and object-storage keys) are now encrypted under a key held only by the region that hosts it and by the control plane. Infrastructure in one region can no longer decrypt another region’s workload configuration. Account-level secrets stay under one key, because any region may run a job for the account.

22. Sep 22, 2026Platform

    Data residency in Casablanca

    Workloads placed in the ma-1 region now carry a residency commitment: their data at rest stays in Morocco. It is a country-level claim about data at rest, available on Team and Agency with the residency add-on. Workloads still run in the EU (eu-1) by default.

23. Sep 21, 2026Platform

    The control plane moves to Casablanca

    The dashboard, the platform database and the job queue now run in Casablanca (ma-1) for every account, whichever region its workloads are in. Tenant workloads keep running in the region they were placed in.

24. Sep 19, 2026Platform

    Terms, privacy policy, DPA and sub-processors

    The legal documents are published in Arabic, French and English, each with a version and a date, and with the residency claim qualified in writing.

25. Sep 19, 2026Design

    A new mark, and docs that draw the pipeline

    The Gheima mark is now four khatam lozenges, with a full icon set. The deploy, preview, domain and database docs show each pipeline as a diagram rather than only describing it.

26. Sep 18, 2026Platform

    Quarterly and yearly plans, and a billing page

    Pay for a quarter or a year in one payment, at a discount, so a gateway that cannot save a card no longer costs you your plan every month. Billing has its own page, invoices carry the buyer’s legal identity, and every invoice is listed, not only the latest 50.

27. Sep 17, 2026Platform

    Deploy from GitLab

    Connect gitlab.com or a self-hosted GitLab with an access token, pick repositories when you create a service, and deploy on push. Merge requests get preview environments, deploys can wait for the commit’s pipelines to pass, and each deployment is reported back to its commit.

28. Sep 12, 2026Platform

    Renewals that do not lose your plan

    Renew a plan before it lapses and keep unused time when you change plan. Billing notices are emailed before a paid period ends, gateway payments get numbered invoices and receipts, and a plan can renew from wallet credit.

29. Sep 10, 2026Platform

    AI diagnosis for failed deploys

    When a deployment fails, Gheima reads the build log and suggests what went wrong. Available on every plan, within a daily cap.

30. Aug 31, 2026Platform

    Edit environment variables in place

    Edit or rename a service’s environment variables without deleting and re-adding them, from the dashboard, API, SDK or CLI.

31. Aug 26, 2026Platform

    Prepaid wallet

    Top up a prepaid credit balance in dirhams and see every movement on your credit statement.

32. Aug 22, 2026Security

    Build-time secrets

    Environment variables you opt into the build reach it as BuildKit secret mounts, so they never land in an image layer.

33. Aug 7, 2026Platform

    Regions

    Every resource now belongs to a region, chosen when it is created, and stays there. This is the groundwork for running workloads outside the EU.

34. Jul 30, 2026Design

    Landing refresh + window-chrome service cards

    New deploy-terminal register, supported-stacks strip, and live stats on the landing page. Service cards in the dashboard now read as little browser windows headed by their live URL. Every page is now in one language. Arabic pages stay Arabic, Latin pages stay Latin.

35. Jul 30, 2026Security

    Credential reveal is now admin-only

    Revealing a database, storage, or queue connection string now needs the admin role, the same role that can delete the resource. Every reveal is rate-limited and audited.

36. Jul 29, 2026Platform

    Release command

    Run migrations or any pre-release step between build and deploy: set a release command and Gheima executes it against the new image before traffic switches over. Deploys abort if it fails.

37. Jul 23, 2026Platform

    Webhooks, deployment cancel, and ⌘K search

    Outbound webhooks with signed deliveries and a delivery-history page, in-flight deployment cancellation, alert-to-channel routing, and a command palette that searches every resource on the account. Plus j/k keyboard navigation across all list pages.

38. Jul 23, 2026Design

    Craft, Zoned: the design system

    Geometrically correct zellige rebuilt on the 8-fold Fez construction, Fassi-cobalt palette, a closed type scale, and Noto Kufi Arabic display headings with full RTL. Ornament is zoned into registers; the product stays bone-calm.

39. Jul 14, 2026School

    Gheima School graduates

    Cohorts, students, resource limits, graduation flows, and instructor roles. A dedicated School plan for teaching cloud deployment, priced per contract.