Skip to main content
Category: paas · devops · docker · self-hosted OS: Ubuntu 24.04 · Version: 0.29.12

​
Overview

Dokploy is an open-source, self-hosted PaaS used to deploy applications and databases from a web dashboard, with Docker builds, Traefik reverse proxying, and automatic TLS handled for you. This image comes with Dokploy installed but switched off: the web port stays closed until you run setup, so nobody can claim the admin account before you do. Setup takes about three minutes and runs the first time you log in.

​
What is on this image

Everything below sits on top of a stock Ubuntu 24.04 server.

​
1. Connect

Once your Compute is running, SSH in as root:
The root password and SSH key are in the Strettch Cloud console. Setup starts automatically when you log in. If you would rather work from the browser console, run /opt/sc/dokploy/setup.sh there instead.

​
2. Answer three questions

Setup asks for:
  • Admin email: This is what you will use to log in.
  • Your name: will be used as the display name. Press Enter to accept Admin
  • Admin password: make sure it is at least twelve characters, typed twice
Pick and save a strong password. Whoever holds the Dokploy admin login controls the whole server. Everything else, setup handles on its own.

​
3. Log in

Setup prints your URL when it finishes. Open it:
If your Compute has a public IP, use that one, you will find it in the console. When required any login details use the previous email and password you entered in your compute.

​
4. Add a domain and HTTPS

Optional, but worth doing if you have a domain. Point an A record at your Compute’s public IP, then set the domain in the Dokploy dashboard. It requests a certificate for you automatically, and ports 80 and 443 are already open. Dokploy documents the full details at docs.dokploy.com.

​
Managing it

​
Security

The firewall allows SSH, HTTP, HTTPS, the Dokploy UI, and the Strettch Cloud agent. Everything else coming in is blocked. fail2ban watches SSH however ten failed logins bans an IP for six hours, with longer bans for repeat offenders, up to a week.
Your password is never stored on the server, so only you have it. If you cancel setup partway through or mistype something, nothing is exposed, you can log in again and it starts over.