Skip to main content
This guide uses Ubuntu 24.04 LTS as the reference operating system. Dokploy also supports other documented Linux distributions, but keep each HMIS installation on a maintained, dedicated server.

​
Baseline sizing

The minimum is not a capacity guarantee. Measure staging workloads and imaging growth before clinical go-live. Do not store the only backup copy on the Dokploy server.

​
Prepare the host

1

Create the server and administrator access

Provision a server with a static public IP. Add named administrator SSH keys, verify key access, then disable password and direct root SSH login according to hospital policy.
2

Patch and set time

Configure the hospital-approved timezone and reliable NTP. Record maintenance and reboot requirements.
3

Reserve required ports

Dokploy installation requires ports 80, 443, and 3000 to be unused. Check before installation:
4

Configure the firewall

Allow SSH only from the administrator VPN or approved source IPs. Allow public 80/TCP and 443/TCP. Allow 3000/TCP only during initial Dokploy setup, then restrict it after configuring the protected dashboard domain.Do not open PostgreSQL, Orthanc Explorer, OIE management, DICOM, ASTM, MLLP, or analyzer listener ports to the internet.
5

Inspect and install Dokploy

Review the current official installation script before executing it, then install as root:
The installer configures Docker, Docker Swarm, and Dokploy’s proxy network.
6

Create the first Dokploy account

Open http://{{SERVER_IP}}:3000, create the owner account, enable strong authentication controls, configure the dashboard domain and TLS, then remove broad public access to port 3000.
7

Verify the platform

​
Host hardening checklist

  • Automatic security updates or a documented monthly patch window
  • Named administrator accounts and retained SSH access audit
  • Encrypted off-site backup credentials stored outside Git
  • Disk, memory, CPU, certificate, and service monitoring
  • Log retention that does not expose patient or credential data
  • Tested console or rescue access if SSH becomes unavailable
  • Documented server provider support and escalation contacts
Proceed when the Dokploy dashboard is protected by HTTPS, the firewall exposes only approved ports, monitoring can reach the host, and off-site backup storage is ready.
Next, create the Dokploy project.