Setup builder
Fills in the blanks of the self-host .env. Everything runs in your browser; nothing you type leaves this page. Secrets are pre-generated for you, and each lives on exactly one line: the stack derives the database connection strings, so changing the password later is a one-line edit.
1 · How you'll reach it
Tailscale, two ways:
Pick any first part; it becomes the tailnet node's name. Your tailnet name is on the admin console's DNS page. Just the name, no https:// (pasting one strips it).Recommended. The bundled proxy joins your tailnet as its own node and serves the address above; the box needs no Tailscale install. MagicDNS + HTTPS certificates must be enabled on the tailnet. See Install.
2 · Operator & secretsRegister with this address and your account unlocks the
/admin console: instance settings, and the invites that let people in once signup is closed.Postgres password and JWT secret are generated too (see the preview); those are replaceable. The encryption key is not: lose it and stored integration credentials are gone.3 · Email (optional)
Password login works; invites become copy-the-link. Magic-link sign-in needs a sender.
4 · Privacy
5 · Advanced
.env (you fill this in)
Still need the address, the Tailscale auth key, your email. Confirm the key backup in section 2. Copy and Download unlock once these are done.# Cobblr self-host, generated by the setup builder.
# ── 1. REQUIRED ─────────────────────────────
COBBLR_SITE_ADDRESS=
SUPERADMIN_EMAILS=
POSTGRES_PASSWORD=xc7DKqDCPkaDgDdRZPrpVxB7
JWT_SECRET=9d4176e5c19357969ff0cc836050cceba3f9ff9e68e50169f8fb16095a3f6a22
# back the next line up somewhere safe. Unrecoverable:
TENANT_CREDS_ENCRYPTION_KEY=65bf6a855efe75147db0faed4909b863
# set false after your account exists, especially if exposing your instance to the public:
PUBLIC_SIGNUP_ENABLED=true
# ── 2. HTTPS ────────────────────────────────
# the proxy joins your tailnet as its own node; no tailscale on the box
COMPOSE_PROFILES=caddy
COBBLR_TLS_MODE=tsnet
TS_AUTHKEY=
# ── 3. EMAIL ────────────────────────────────
# none configured. Password login works;
# invites are copy-the-link.
# ── 4. PRIVACY ──────────────────────────────
# COBBLR_AI_ENABLED=false
# COBBLR_SCAN_EXTERNAL_LOOKUPS=false
# ── 5. ADVANCED ─────────────────────────────
# COBBLR_VERSION=latest
# DB connection strings derive from POSTGRES_PASSWORD in the stack;
# set DATABASE_URL / SUPERUSER_DATABASE_URL only for an external Postgres.
docker-compose.yml (same for everyone)Download
# loading docker-compose.yml…docker compose up -d. See Install for the full walkthrough.