Files
agentrhq__authsome/docker-compose.yml
Manoj Bajaj 6231674610 feat: add Dockerfile, docker-compose, and self-hosting guide
Enables single-command self-deployment of the authsome daemon in a
container without requiring Python or uv on the host.

- Multi-stage Dockerfile: ui-builder (Node 24/pnpm) → py-builder (uv
  wheel) → slim Python 3.13 runtime, non-root authsome user
- docker-compose.yml with named volume and restart: unless-stopped
- .dockerignore to keep the build context minimal
- docs/guides/self-hosting.md covering quick-start, env vars, volume
  backup/restore, TLS with Caddy, and local builds
- .github/workflows/docker.yml CI job that builds the image on every PR
- README.md self-hosting quick-start section

Closes #366

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-02 16:45:48 +05:30

29 lines
1005 B
YAML

services:
authsome:
build: .
image: authsome:latest
restart: unless-stopped
ports:
- "7998:7998"
volumes:
- authsome-data:/data/authsome
environment:
AUTHSOME_HOME: /data/authsome
# Set this to the public URL of this server so OAuth callbacks resolve correctly.
# Example: AUTHSOME_SERVER_BASE_URL: https://auth.example.com
AUTHSOME_SERVER_BASE_URL: ""
# Encryption mode: "local_key" (default) or "keyring"
AUTHSOME_ENCRYPTION_MODE: local_key
AUTHSOME_LOG_LEVEL: info
# Uncomment to use a pre-built image from a registry instead of building locally:
# image: ghcr.io/agentrhq/authsome:latest
# ── Optional: Caddy reverse proxy for TLS ─────────────────────────
# Uncomment the block below and add a caddy service to terminate TLS.
# labels:
# caddy: auth.example.com
# caddy.reverse_proxy: "{{upstreams 7998}}"
volumes:
authsome-data: