The checklist you run on every server move, done for you.
Every step of moving a Forge server, from reading the old config to moving the reserved IP, in one reviewed, resumable migration.
Every site, every setting, side by side.
Pick the old server and Kiln loads each site from Forge. Work through tabs for the deploy script, .env, database, domains and files, and nginx. A checklist shows what you have and have not opened.
- Old and new deploy scripts next to each other, editable
- Database host, name and user rewritten for the new server
- Git-ignored upload folders found for you
Databases and files copied server to server.
The new server pulls each database and asset folder straight from the old one over a temporary SSH key, in the background, so a large site is not cut off part-way.
- mysqldump with single-transaction, piped and compressed
- rsync for uploads, with file counts in the log
- Credentials read from each server, never sent through Forge
One switch, no DNS changes.
When every site passes its smoke test, Kiln puts the old sites into maintenance, re-syncs anything written since the first copy, and moves your DigitalOcean reserved IP to the new droplet.
- Maintenance mode for Craft and Laravel sites
- Final re-sync so no orders or form entries are lost
- Let's Encrypt certificates requested after the move
PHP settings your stack actually needs.
Keep presets for Craft, Craft Commerce or Laravel and load one on each migration. Kiln shows the old server value, the preset value and the final value for every setting.
- php.ini and PHP-FPM pool settings
- Save any migration as a new preset
- PHP-FPM reloaded before the first deploy
Locked-down servers stay locked down.
Forge firewall rules and DigitalOcean cloud firewalls are copied to the new server after the smoke tests, and open web ports can be closed if your sites are VPN-only.
- Copy Forge firewall rules
- Join the same DigitalOcean cloud firewalls
- Temporary SSH rule removed at the end
Built to hold the keys to production.
Your team shares one encrypted Forge and DigitalOcean connection, so nobody passes tokens around. Two-factor login is required, and nothing sensitive is left behind on your servers.
- Invite your team with owner, admin and member roles
- Required two-factor authentication
- One-click cleanup if you abandon a migration
Questions
Does Kiln change anything on my old server?
Only two temporary things during the copy: an SSH key and a firewall rule letting the new server connect. Both are removed at the end. At switch-over the old sites go into maintenance mode, and that is it.
What if a site fails part-way?
The other sites finish the step, then the migration pauses. You can retry, edit the deploy script, or leave that site on the old server and carry on with the rest.
Do I need a DigitalOcean reserved IP?
No. Without one, Kiln creates a reserved IP for the new server and shows you exactly which DNS records to update, with live checks.
Which apps does it support?
Craft CMS, Laravel and Statamic sites on MySQL or MariaDB get the full flow, including maintenance mode. Other PHP sites move too, without maintenance mode.
Can I try it without touching real servers?
Yes. New teams start in demo mode, which simulates Forge and DigitalOcean so you can run a whole migration, switch-over included, before connecting anything.