Business tools stack

This repo contains docker compose files to start various tools commonly needed by businesses.

These tools are most suited for startup and small businesses as it's intended to run on a single server.

You should also be comfortable with a little involvement in maintenance and perhaps service disruption.

That being said it's actually very helpful and can save you a lot of money while you get your business started and/or growing. If you grow too large for a single server setup, you should have enough money (hope so !) to either pay for a hosted version or you have an ops team that can deploy these tools in a highly available infrastructure.

If you want to add a service, don't hesitate to create a pull request.

This project is trying to have "sane" defaults configuration, that's why it's recommended to have an S3 bucket and smtp server. It will ease the configuration for backups and notifications. It's also providing automatic SSL certificate management.

Warning❗

This repo aims to facilitate the deployment of tools behind a reverse proxy with automated SSL management. However, it doesn't cover server security for which YOU are responsible.

It's already well described in Geerling Guy's ansible playbook and you can use it to start securing your server. For a thorough guide, see https://github.com/imthenachoman/How-To-Secure-A-Linux-Server

Although the data are persisted to the host machine, and some services have backups pre-configured, you are responsible to check and manage your backups.

Prerequisites

• A running server reachable from outside
• Docker - 23+
• Docker Compose - 2.16+
• Git
• The port 80 and 443 open
• A wildcard DNS A record (or a DNS A record per service) that points to this server IP: *.example.com A 1.2.3.4

Highly recommended:

• One or more S3-like bucket with S3 credentials with read/write permissions (great for backup and flexible storage)
• A smtp server for transactional email (email verification, notifications, etc..)
• GPG (should be installed by default on linux) to encrypt backup

Getting started

The only mandatory service is the reverse proxy (traefik) located at the root of the project. So first follow the instruction while being at the root of the project. Then go to any service directory and do the same steps.

If you prefer a GUI, you can also start the portainer service and then manage all the other services with portainer. The compose.yaml and .env files are compatible with portainer.

To start a service do the following:

1. Clone this repository

git clone https://github.com/Pat-rice/business-tools business-tools
cd business-tools

1. Copy the .env.example and name it .env
2. Update the .env file with your values (Domain name, credentials, etc..)
3. docker compose up -d

You can test the reverse proxy setup with the simple service whoami and you can also activate its dashboard (don't forget to update the credentials)

Please note that service containers have to be in "healthy" state before being accessible, depending on the service, it can take several minutes.

Services

List of services currently present:

• Traefik - mandatory - reverse proxy
• Whoami - test service
• Keycloak - IAM
• Mattermost - Team chat
• Wordpress - CMS
• Vikunja - Todo app
• Docker registry - Docker image registry
• Gitlab - CI & more
• Portainer - Container management with GUI

Wish list:

• Jitsi
• Discourse
• Nextcloud
• Gitea
• Cal.com
• Zulip
• Grafana
• Loki
• Prometheus
• Supabase
• Plausible
• Matomo
• Outline
• Odoo
• Uptime-Kuma