Self-host GoAlert

copy# GoAlert — on-call schedules, escalation policies and alert notifications — based on the project's Getting Started guide, pinned to v0.35.0
echo "DB_PASSWORD=$(openssl rand -hex 16)" > .env
echo "ENCRYPTION_KEY=$(openssl rand -hex 32)" >> .env
echo "ADMIN_PASSWORD=$(openssl rand -hex 12)" >> .env
cat > docker-compose.yml <<'EOF'
services:
  goalert:
    image: goalert/goalert:v0.35.0
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy
    environment:
      GOALERT_DB_URL: postgres://goalert:${DB_PASSWORD}@db:5432/goalert?sslmode=disable
      GOALERT_DATA_ENCRYPTION_KEY: ${ENCRYPTION_KEY}
      GOALERT_PUBLIC_URL: http://SERVER_IP:8081
    ports:
      - 8081:8081
  db:
    image: postgres:17
    restart: unless-stopped
    environment:
      POSTGRES_USER: goalert
      POSTGRES_PASSWORD: ${DB_PASSWORD}
      POSTGRES_DB: goalert
    volumes:
      - db_data:/var/lib/postgresql/data
    healthcheck:
      test: ["CMD-SHELL", "pg_isready -U goalert -d goalert"]
      interval: 5s
      timeout: 5s
      retries: 10
volumes:
  db_data:
EOF
docker compose up -d
timeout 120 bash -c 'until curl -fsS http://localhost:8081/health >/dev/null; do sleep 5; done'
. ./.env
docker compose exec -T goalert goalert add-user --db-url "postgres://goalert:${DB_PASSWORD}@db:5432/goalert?sslmode=disable" --admin --user admin --email admin@example.com --pass "$ADMIN_PASSWORD"
# → http://SERVER_IP:8081 — sign in as admin with ADMIN_PASSWORD from .env