Penpot

# Connect via SSH
ssh root@your-vps-ip

# Alternative with key file
ssh -i /path/to/key root@your-vps-ip

# Create and navigate to project directory
mkdir -p ~/apps/penpot
cd ~/apps/penpot

services:
  penpot-frontend:
    image: penpotapp/frontend:latest
    ports:
      - "9001:8080"
    environment:
      - PENPOT_FLAGS=disable-registration enable-login disable-email-verification
      - PENPOT_BACKEND_URI=http://penpot-backend:6060
      - PENPOT_EXPORTER_URI=http://penpot-exporter:6061
    restart: unless-stopped
    depends_on:
      - penpot-backend
      - penpot-exporter

  penpot-backend:
    image: penpotapp/backend:latest
    environment:
      - PENPOT_FLAGS=disable-registration enable-login disable-email-verification disable-secure-session-cookies
      - PENPOT_SECRET_KEY=<your-secret-key>
      - PENPOT_PUBLIC_URI=http://localhost:9001
      - PENPOT_DATABASE_URI=postgresql://penpot-postgres/penpot
      - PENPOT_DATABASE_USERNAME=penpot
      - PENPOT_DATABASE_PASSWORD=<your-db-password>
      - PENPOT_REDIS_URI=redis://penpot-valkey/0
      - PENPOT_OBJECTS_STORAGE_BACKEND=fs
      - PENPOT_OBJECTS_STORAGE_FS_DIRECTORY=/opt/data/assets
    volumes:
      - penpot_assets:/opt/data/assets
    restart: unless-stopped
    depends_on:
      penpot-postgres:
        condition: service_healthy
      penpot-valkey:
        condition: service_started

  penpot-exporter:
    image: penpotapp/exporter:latest
    environment:
      - PENPOT_PUBLIC_URI=http://penpot-frontend:8080
      - PENPOT_REDIS_URI=redis://penpot-valkey/0
    restart: unless-stopped

  penpot-postgres:
    image: postgres:15-alpine
    environment:
      - POSTGRES_INITDB_ARGS=--data-checksums
      - POSTGRES_DB=penpot
      - POSTGRES_USER=penpot
      - POSTGRES_PASSWORD=<your-db-password>
    volumes:
      - penpot_db:/var/lib/postgresql/data
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U penpot -d penpot"]
      interval: 10s
      timeout: 5s
      retries: 5
      start_period: 30s

  penpot-valkey:
    image: valkey/valkey:8.1-alpine
    restart: unless-stopped

volumes:
  penpot_assets:
  penpot_db:

# Start all services
docker compose up -d

# List running containers
docker compose ps

# Watch the logs
docker compose logs -f

# Allow the application port through firewall
sudo ufw allow 9001/tcp
sudo ufw reload

# Access your app at:
# http://your-server-ip:9001