docs(onprem): fix the Docker Compose install guide from an end-to-end install run - #16090
Merged
Merged
Conversation
…ning Tell readers to open psql as the postgres superuser before the CREATE statements, and point to the Hardware Sizing database tuning section at the database step. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Drop the Deploy Version prompt from the table. The wizard only shows it in developer mode; the deployment files follow the DefectDojo version. - Say that the version defaults to latest and recommend pinning a release from the Pro changelog. - Add an archive integrity check against the release's checksums.txt. - Show exporting DOJO_CLI_KEY and running first-install with sudo -E. - Point to change-password if the printed admin password does not work. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The shipped certificate is a placeholder for another hostname, not a usable self-signed certificate, so say it must be replaced. Give the ownership and modes nginx needs (it runs as UID 1002 with group 0, so a dojosrv:dojosrv 0640 key stops it from starting) and add a check that nginx is up after the restart. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…p note for compose - Say that users need only 80 and 443, and that the stack also publishes 9142 (MCP server) and 9871 (orchestration) on all interfaces. Because Docker's rules for published ports bypass ufw, restrict them at the network firewall or in the DOCKER-USER chain. - Add a troubleshooting entry for the unit repeatedly failing with "already running": disable the unit rather than stopping it, since its ExecStop runs app stop and removes the containers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
blakeaowens
approved these changes
Sep 25, 2026
devGregA
approved these changes
Sep 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
[sc-15945]
Description
Corrections to the Docker Compose install guide, found by following it end to end on a fresh two-host install of 3.3.200 with dojo-compose-cli 2.1.4.
sudo -u postgres psql) and links the PostgreSQL tuning table in Hardware Sizing.latest. Adds achecksums.txtintegrity check for the archive, showssudo -Eat first-install, and says what to do if the printed admin password doesn't work (app change-password).dojosrv:root, 0644 cert, 0640 key) that the nginx container can read, and a check that nginx is serving afterwards.systemctl stopan active unit.English only, matching recent on-prem doc PRs. The Kubernetes page is generated from the Helm chart repository, so its fixes go there.
Targets
bugfix, per the current convention. If #16086 merges first, this can be retargeted todev.Test results
hugo --minify --gc --config config/production/hugo.tomlbuilds with no errors.🤖 Generated with Claude Code