diff --git a/apps/docs/content/docs/core/installation.mdx b/apps/docs/content/docs/core/installation.mdx index 5b3dfa9..bf7359a 100644 --- a/apps/docs/content/docs/core/installation.mdx +++ b/apps/docs/content/docs/core/installation.mdx @@ -73,6 +73,11 @@ After running the installation script, Dokploy and its dependencies will be set Open your web browser and navigate to `http://your-ip-from-your-vps:3000`. You will be directed to the initial setup page where you can configure the administrative account for Dokploy. + + **Important:** Ensure that your server's firewall allows traffic on port + 3000 to access the Dokploy web interface. + + ### Initial Configuration 1. **Create an Admin Account:** Fill in the necessary details to set up your administrator account. This account will be the admin account for Dokploy. @@ -86,3 +91,24 @@ Open your web browser and navigate to `http://your-ip-from-your-vps:3000`. You w alt="home og image" className="rounded-lg" /> + +### Secure Your Installation +After setting up your admin account, it's crucial to secure your Dokploy installation by enabling HTTPS. + +To configure a domain with SSL/TLS certificates for your Dokploy panel, please refer to the [Domains](/docs/core/domains) section where you'll find detailed instructions for different SSL configurations including Let's Encrypt, Cloudflare, and custom certificates. + +### Disable access via ip:port (Optional but Recommended) +To enhance security, it's advisable to restrict access to Dokploy via the server's IP address and port. + + + **Important:** Before disabling IP:port access, make sure you have configured a domain with HTTPS working properly. Otherwise, you will lose access to your Dokploy installation. See the [Domains](/docs/core/domains) section to set this up first. + + +Once you have verified that your domain is working correctly, you can disable IP:port access by running this command on the server: + +```bash +docker service update --publish-rm "published=3000,target=3000,mode=host" dokploy +``` + +To further secure your installation, consider reading the [Security recommendations](/docs/core/multi-server/security#security-recommendations) section. +