Self-host Kimai

copy# Kimai + MySQL — the compose file from kimai.org's Docker Compose docs, with generated passwords in .env
mkdir -p kimai && cd kimai
printf 'DB_PASS=%s\nDB_ROOT_PASS=%s\nADMINPASS=%s\n' "$(openssl rand -hex 16)" "$(openssl rand -hex 16)" "$(openssl rand -hex 12)" > .env
# Behind a domain, also set TRUSTED_HOSTS=your.domain in the kimai environment
cat > docker-compose.yml <<'EOF'
services:
  sqldb:
    image: mysql:8.4
    volumes: [mysql:/var/lib/mysql]
    environment: [MYSQL_DATABASE=kimai, MYSQL_USER=kimaiuser, "MYSQL_PASSWORD=${DB_PASS}", "MYSQL_ROOT_PASSWORD=${DB_ROOT_PASS}"]
    command: --default-storage-engine innodb
    restart: unless-stopped
    healthcheck: { test: mysqladmin -uroot -p$$MYSQL_ROOT_PASSWORD ping -h 127.0.0.1 --silent, interval: 10s, timeout: 5s, retries: 12, start_period: 30s }
  kimai:
    image: kimai/kimai2:apache
    depends_on: { sqldb: { condition: service_healthy, restart: true } }
    volumes: [data:/opt/kimai/var/data, plugins:/opt/kimai/var/plugins]
    ports: ["8001:8001"]
    environment: [ADMINMAIL=admin@example.com, "ADMINPASS=${ADMINPASS}", "DATABASE_URL=mysql://kimaiuser:${DB_PASS}@sqldb/kimai?charset=utf8mb4&serverVersion=8.4.0"]
    restart: unless-stopped
volumes: { data: {}, mysql: {}, plugins: {} }
EOF
docker compose up -d
# →  http://SERVER_IP:8001 — log in as admin@example.com with ADMINPASS from .env