Config generator

A compose.yaml and an optional .env for a self-hosted WireHub, for a terminal or for a Docker UI (Portainer, Komodo, Dockhand …): paste both, deploy, open the URL and finish /setup.

Everything happens in this browser

This page runs entirely in this browser session. Nothing you type is sent anywhere: the page makes no network request at all (its content security policy forbids it), has no analytics and stores nothing. Secrets, if you ask for them here, come from your browser's own random generator (WebCrypto). You can save this page and use it offline.

The same result without this page

You do not need the generator. With no .env at all, the stack generates every secret itself on first start:

mkdir wirehub && cd wirehub
curl -fsSLO https://raw.githubusercontent.com/formless63/wirehub/main/compose.yaml
docker compose up -d
docker compose logs wirehub      # the first-run setup code

For optional settings, download .env.example beside it, copy it to .env and uncomment what you need. To keep every secret in that file instead (a password manager, a re-deploy onto fresh volumes), the terminal script fills them in:

curl -fsSLO https://raw.githubusercontent.com/formless63/wirehub/main/.env.example
curl -fsSLO https://raw.githubusercontent.com/formless63/wirehub/main/scripts/setup-env.sh
bash setup-env.sh

Address Public URL what people open; behind a reverse proxy, its https address

Listen on Port

Image tag blank = the release this page was built with Time zone

Database Bundled PostgreSQL 18 recommended My own PostgreSQL

Admin connection URL a role that may create roles and the database; WireHub makes its own roles with it

File storage (S3) Bundled Garage recommended; its keys are created on first start My own S3-compatible storage

Endpoint

Region Bucket

Access key id Secret access key

Read-only key id optional, for backups Read-only secret

Backups Off On, to a repository on this machine restic, in a volume On, to an existing restic repository recommended: another machine or a cloud bucket

Repository URL Repository password needed for an existing repository; blank = generate one for a new repository

S3 access key id s3: repositories S3 secret

Schedule cron: minute hour day month weekday Backrest UI port

Printed PDFs Browser PDF engine the pdf profile: Gotenberg (headless Chromium, about 1 GB of memory) prints the build sheet, BOM, test spec and drawing to PDF exactly as a browser does; off = plain text-layout PDFs. The engine's address is written to the .env; it can also be set later in Settings

Sign-in and everything else

Sign-in is on: first-run setup makes your account, and you invite everyone else. GitHub, Google, single sign-on (OIDC), magic links over SMTP, allowed emails, alerts to a webhook, the git mirror and the job settings are set later in the app, under Settings; they apply at once, with no redeploy. Only what the install needs is set here.

Domain modules to suggest at setup

Pre-ticked on the setup page; you still decide there, and can add more later.

Secrets Let the stack generate them on first start recommended: they never leave the server Generate them here, into the .env

compose.yaml

.env

Put both files in an empty folder (or paste them into your Docker UI's compose and environment boxes).
docker compose up -d, or deploy.
Open the public URL; /setup asks for the setup code from the wirehub service's log (docker compose logs wirehub, or the container's logs in your UI).