Open Project

[dmBunting]

It would be great to have a service deployment for Open Project! https://www.openproject.org/

[luksak]

I would be super grateful to have an OpenProject template. Has anyone got it working?

[openforge-kt]

I managed to get it working, but I can't verify if this is safe and secure because it involves setting HSTS config to false.
Deploy as empty docker-compose:

networks:
  frontend: null
  backend: null
volumes:
  opdata: null
x-op-restart-policy:
  restart: unless-stopped
x-op-image:
  image: 'openproject/openproject:${TAG:-16-slim}'
x-op-app:
  image: 'openproject/openproject:${TAG:-16-slim}'
  restart: unless-stopped
  environment:
    OPENPROJECT_HTTPS: '${OPENPROJECT_HTTPS:-true}'
    OPENPROJECT_HOST__NAME: '${OPENPROJECT_HOST__NAME:-localhost:8080}'
    OPENPROJECT_HSTS: '${OPENPROJECT_HSTS:-true}'
    RAILS_CACHE_STORE: memcache
    OPENPROJECT_CACHE__MEMCACHE__SERVER: 'cache:11211'
    OPENPROJECT_RAILS__RELATIVE__URL__ROOT: '${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}'
    DATABASE_URL: '${DATABASE_URL:-postgres://postgres:p4ssw0rd@db/openproject?pool=20&encoding=unicode&reconnect=true}'
    RAILS_MIN_THREADS: '${RAILS_MIN_THREADS:-4}'
    RAILS_MAX_THREADS: '${RAILS_MAX_THREADS:-16}'
    IMAP_ENABLED: '${IMAP_ENABLED:-false}'
  volumes:
    - 'openproject:/var/openproject/assets'
services:
  cache:
    image: memcached
    restart: unless-stopped
    networks:
      - backend
  web:
    image: 'openproject/openproject:${TAG:-16-slim}'
    restart: unless-stopped
    environment:
      OPENPROJECT_HTTPS: '${OPENPROJECT_HTTPS:-true}'
      OPENPROJECT_HOST__NAME: '${OPENPROJECT_HOST__NAME:-localhost:8080}'
      OPENPROJECT_HSTS: '${OPENPROJECT_HSTS:-true}'
      RAILS_CACHE_STORE: memcache
      OPENPROJECT_CACHE__MEMCACHE__SERVER: 'cache:11211'
      OPENPROJECT_RAILS__RELATIVE__URL__ROOT: '${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}'
      DATABASE_URL: '${DATABASE_URL:-postgres://postgres:p4ssw0rd@db/openproject?pool=20&encoding=unicode&reconnect=true}'
      RAILS_MIN_THREADS: '${RAILS_MIN_THREADS:-4}'
      RAILS_MAX_THREADS: '${RAILS_MAX_THREADS:-16}'
      IMAP_ENABLED: '${IMAP_ENABLED:-false}'
    volumes:
      - 'openproject:/var/openproject/assets'
    command: ./docker/prod/web
    networks:
      - frontend
      - backend
    depends_on:
      - cache
      - seeder
    labels:
      - autoheal=true
    healthcheck:
      test:
        - CMD
        - curl
        - '-f'
        - 'http://localhost:8080${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}/health_checks/default'
      interval: 10s
      timeout: 3s
      retries: 3
      start_period: 30s
  autoheal:
    image: 'willfarrell/autoheal:1.2.0'
    volumes:
      - '/var/run/docker.sock:/var/run/docker.sock'
    environment:
      AUTOHEAL_CONTAINER_LABEL: autoheal
      AUTOHEAL_START_PERIOD: 600
      AUTOHEAL_INTERVAL: 30
  worker:
    image: 'openproject/openproject:${TAG:-16-slim}'
    restart: unless-stopped
    environment:
      OPENPROJECT_HTTPS: '${OPENPROJECT_HTTPS:-true}'
      OPENPROJECT_HOST__NAME: '${OPENPROJECT_HOST__NAME:-localhost:8080}'
      OPENPROJECT_HSTS: '${OPENPROJECT_HSTS:-true}'
      RAILS_CACHE_STORE: memcache
      OPENPROJECT_CACHE__MEMCACHE__SERVER: 'cache:11211'
      OPENPROJECT_RAILS__RELATIVE__URL__ROOT: '${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}'
      DATABASE_URL: '${DATABASE_URL:-postgres://postgres:p4ssw0rd@db/openproject?pool=20&encoding=unicode&reconnect=true}'
      RAILS_MIN_THREADS: '${RAILS_MIN_THREADS:-4}'
      RAILS_MAX_THREADS: '${RAILS_MAX_THREADS:-16}'
      IMAP_ENABLED: '${IMAP_ENABLED:-false}'
    volumes:
      - 'openproject:/var/openproject/assets'
    command: ./docker/prod/worker
    networks:
      - backend
    depends_on:
      - cache
      - seeder
  cron:
    image: 'openproject/openproject:${TAG:-16-slim}'
    restart: unless-stopped
    environment:
      OPENPROJECT_HTTPS: '${OPENPROJECT_HTTPS:-true}'
      OPENPROJECT_HOST__NAME: '${OPENPROJECT_HOST__NAME:-localhost:8080}'
      OPENPROJECT_HSTS: '${OPENPROJECT_HSTS:-true}'
      RAILS_CACHE_STORE: memcache
      OPENPROJECT_CACHE__MEMCACHE__SERVER: 'cache:11211'
      OPENPROJECT_RAILS__RELATIVE__URL__ROOT: '${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}'
      DATABASE_URL: '${DATABASE_URL:-postgres://postgres:p4ssw0rd@db/openproject?pool=20&encoding=unicode&reconnect=true}'
      RAILS_MIN_THREADS: '${RAILS_MIN_THREADS:-4}'
      RAILS_MAX_THREADS: '${RAILS_MAX_THREADS:-16}'
      IMAP_ENABLED: '${IMAP_ENABLED:-false}'
    volumes:
      - 'openproject:/var/openproject/assets'
    command: ./docker/prod/cron
    networks:
      - backend
    depends_on:
      - cache
      - seeder
  seeder:
    image: 'openproject/openproject:${TAG:-16-slim}'
    restart: on-failure
    environment:
      OPENPROJECT_HTTPS: '${OPENPROJECT_HTTPS:-true}'
      OPENPROJECT_HOST__NAME: '${OPENPROJECT_HOST__NAME:-localhost:8080}'
      OPENPROJECT_HSTS: '${OPENPROJECT_HSTS:-true}'
      RAILS_CACHE_STORE: memcache
      OPENPROJECT_CACHE__MEMCACHE__SERVER: 'cache:11211'
      OPENPROJECT_RAILS__RELATIVE__URL__ROOT: '${OPENPROJECT_RAILS__RELATIVE__URL__ROOT:-}'
      DATABASE_URL: '${DATABASE_URL:-postgres://postgres:p4ssw0rd@db/openproject?pool=20&encoding=unicode&reconnect=true}'
      RAILS_MIN_THREADS: '${RAILS_MIN_THREADS:-4}'
      RAILS_MAX_THREADS: '${RAILS_MAX_THREADS:-16}'
      IMAP_ENABLED: '${IMAP_ENABLED:-false}'
    volumes:
      - 'openproject:/var/openproject/assets'
    command: ./docker/prod/seeder
    networks:
      - backend

I removed the DB because I wanted to use an external one, but you're free to leave it in if you prefer.

For env vars I only used these, I configured the rest (SMTP) in the dashboard:

DATABASE_URL=postgres://<pguser>:<pgpw>@<pghost>:<pghost>/<pgdb>?pool=20&encoding=unicode&reconnect=true
IMAP_ENABLED=true
OPENPROJECT_HOST__NAME=kanban.example.com
OPENPROJECT_HSTS=false
OPENPROJECT_HTTPS=true
OPENPROJECT_RAILS__RELATIVE__URL__ROOT=
OPENPROJECT_SECRET_KEY_BASE=<secret value>
RAILS_MAX_THREADS=16
RAILS_MIN_THREADS=4

[openforge-kt]

I forgot to mention, for the "Seeder" service, I recommend checking the "Exclude from service status" box, as it's intended behavior is to be shut down after initial setup

[R2Pitou]

I've just wasted 3 hours trying to get Open Project to load as much as a login page... I'm so glad I decided to give Coolify a go before trying to run a single deployment that isn't in the recipe book (2 / 3 deployments I really should get working)
Absolute nightmare to work with, and no amount of Gemini / ChatGPT or my own thinking power will be enough to wrap around the coolify "magic"
--autonuke

services:
  db:
    image: 'postgres:13'
    restart: always
    volumes:
      - 'openproject_data_final:/var/lib/postgresql/data'
    environment:
      POSTGRES_PASSWORD: supersecretpassword
      POSTGRES_DB: openproject
    healthcheck:
      test:
        - CMD-SHELL
        - 'pg_isready -U postgres'
      interval: 5s
      timeout: 5s
      retries: 20
  web:
    image: 'openproject/community:13'
    restart: always
    depends_on:
      db:
        condition: service_healthy
    environment:
      - SERVICE_URL_WEB_8080
      - 'DATABASE_URL=postgres://postgres:supersecretpassword@db:5432/openproject'
      - OPENPROJECT_HTTPS=true
      - OPENPROJECT_HSTS=true
      - 'OPENPROJECT_HOST__NAME=${COOLIFY_FQDN_WEB:-localhost}'
      - SECRET_KEY_BASE=saltsomethingfunhere
      - OPENPROJECT_WEB_WORKERS=4
      - OPENPROJECT_WEB_MAX_THREADS=32
    volumes:
      - 'openproject_static:/var/openproject/assets'
      - 'openproject_storage:/var/openproject/files'
    healthcheck:
      test:
        - CMD
        - 'true'
      interval: 30s
      start_period: 0s
volumes:
  openproject_data_final: null
  openproject_static: null
  openproject_storage: null