Docker deployment¶

Experimental

The Docker deployment is functional but unstable. For production, use Ansible or bare metal install.

Stack overview¶

docker/docker-compose.yml defines a complete stack:

Service	Purpose
`postgres`	Nextcloud database
`redis`	Nextcloud session cache
`nextcloud`	Fresh Nextcloud instance with auto-provisioning
`istota`	Scheduler + Claude Code
`web`	SvelteKit + FastAPI web UI
`nginx`	Reverse proxy (single entry port)
`browser` (profile)	Chrome + VNC container for web browsing
`webhooks` (profile)	GPS webhook receiver

Configuration¶

cd docker
cp .env.example .env
# Edit .env: set CLAUDE_CODE_OAUTH_TOKEN, passwords, USER_NAME
docker compose up -d

The .env file exposes most settings available in the Ansible role: scheduler intervals, conversation tuning, progress updates, sleep cycle, memory search, email, ntfy, developer skill, and per-user overrides.

The config at /data/config/config.toml is generated on first start. To change settings after setup:

docker compose exec istota vi /data/config/config.toml
docker compose restart istota

Optional profiles¶

docker compose --profile browser up -d              # Web browsing
docker compose --profile location up -d             # GPS tracking
docker compose --profile browser --profile location up -d  # Both

The browser container requires x86-64 (Chrome has no ARM packages).

Volumes¶

Volume	Purpose
`nextcloud_data`	Nextcloud user data
`shared_files`	Shared between Nextcloud and Istota (RW both)
`postgres_data`	PostgreSQL data
`redis_data`	Redis data

Nextcloud's native data volume is mounted RO in istota at /mnt/nc-data for Talk attachment fallback.

Security differences¶

No network proxy: Docker's network isolation replaces the CONNECT proxy
Sandbox + skill proxy: enabled by default, work inside the container
All extras installed: every optional dependency included in the image

Key env vars¶

Variable	Purpose
`CLAUDE_CODE_OAUTH_TOKEN`	Claude authentication
`ADMIN_PASSWORD`	Nextcloud admin
`USER_NAME` / `USER_PASSWORD`	Your Nextcloud account
`BOT_PASSWORD`	Bot's Nextcloud account
`POSTGRES_PASSWORD`	Database