Self-host HedgeDoc

copy# HedgeDoc 1.x + PostgreSQL — upstream's docker-compose example, with generated secrets
mkdir -p ~/hedgedoc && cd ~/hedgedoc
cat > .env <<EOF
POSTGRES_PASSWORD=$(openssl rand -hex 24)
CMD_SESSION_SECRET=$(openssl rand -hex 32)
EOF
# postgres 18+ refuses the older /var/lib/postgresql/data mount that upstream's example still shows, so the volume goes on /var/lib/postgresql
cat > docker-compose.yml <<'EOF'
services:
  database:
    image: postgres:18.6-alpine
    environment: { POSTGRES_USER: hedgedoc, POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}", POSTGRES_DB: hedgedoc }
    volumes: ["database:/var/lib/postgresql"]
    restart: always
  app:
    image: quay.io/hedgedoc/hedgedoc:1.12.0
    environment:
      CMD_DB_URL: "postgres://hedgedoc:${POSTGRES_PASSWORD}@database:5432/hedgedoc"
      CMD_SESSION_SECRET: "${CMD_SESSION_SECRET}"
      CMD_DOMAIN: SERVER_IP
      CMD_URL_ADDPORT: "true"
    volumes: ["uploads:/hedgedoc/public/uploads"]
    ports: ["3000:3000"]
    restart: always
    depends_on: [database]
volumes: { database: {}, uploads: {} }
EOF
docker compose up -d  #  →  http://SERVER_IP:3000
# behind a TLS proxy set CMD_DOMAIN to your domain, CMD_PROTOCOL_USESSL=true and drop CMD_URL_ADDPORT