Skip to content

Commit 5fb87c9

Browse files
authored
Update docker-compose.mdx
1 parent ac63fde commit 5fb87c9

File tree

1 file changed

+42
-2
lines changed

1 file changed

+42
-2
lines changed

pages/installation/docker-compose.mdx

Lines changed: 42 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@ title: Docker Compose
55
import { Callout } from "nextra/components";
66
import DockerEnvvarApps from '../../components/snippets/docker-envvar-apps.mdx';
77
import { Cards } from 'nextra/components';
8-
import Prereqs from '../../components/snippets/installation-pre-reqs.mdx';
98

109
<Callout>
1110
Watch the Tutorial for docker-compose install: https://m.youtube.com/watch?v=A6CjAmJOWvA&t=5s
@@ -17,7 +16,48 @@ This guide assumes that you have docker installed, with a reasonable amount of r
1716

1817
- Virtual Machine, Ubuntu 24.04, 2Gb RAM, 2 vCPUs.
1918

20-
<Prereqs />
19+
## Installation Prerequisites
20+
21+
This section will ask you to install & configure several services exaplained below.
22+
23+
### Network Requirements
24+
25+
#### HTTPS / HTTP Requirement
26+
27+
Postiz marks it's login cookies as Secure, this is called “secure context” in modern web browsers.
28+
29+
If you want to use an secure Login Process, you need to set up an Certificate, which can be done via Reverse Proxy like Caddy or Nginx.
30+
31+
If you cannot use a certificate (HTTPS), add the following environment variable to your `.env` file:
32+
```env
33+
NOT_SECURED=true
34+
```
35+
**Security Warning**: Setting `NOT_SECURED=true` disables secure cookie requirements. This should only be used in development environments or when you fully understand the security implications. Not recommended for production use.
36+
37+
#### Network Ports
38+
39+
- **5000/tcp**: for a single **single entry point** for postiz when running in a container. This is the one port your reverse proxy should talk to.
40+
- **4200/tcp**: for the **Frontend** service (the web interface). Most users **do not** need to expose this port publicly.
41+
- **3000/tcp**: for the **Backend** service (the API). Most users **do not** need to expose this port publicly.
42+
- **5432/tcp**: for the **Postgres** container. Most users **do not** need to expose this port publicly.
43+
- **6379/tcp**: for the **Redis** container. Most users **do not** need to expose this port publicly.
44+
45+
If you are using docker images, we recommend just exposing port 5000 to your external proxy. This will reduce the likelihood of misconfiguration, and make it easier to manage your network.
46+
47+
```mermaid
48+
graph TD;
49+
A[Your Browser] -->|HTTPS 443/tcp| B[Your Reverse Proxy]
50+
B -->|HTTP 5000/tcp| C["Internal Proxy (Caddy)"]
51+
52+
subgraph "Postiz Container"
53+
C -->|4200/tcp| D[Frontend Service]
54+
C -->|3000/tcp| E[Backend Service]
55+
C -->|/api| H[uploads]
56+
end
57+
58+
E -->|5432/tcp| F[Postgres Container]
59+
E -->|6379/tcp| G[Redis Container]
60+
```
2161

2262
### Configuration uses environment variables
2363

0 commit comments

Comments
 (0)