Coolify

1. Postgres. New resource, Database, PostgreSQL. Copy its internal URL.
2. Storage. New resource, Service, MinIO. Make a bucket and an access key in its console, and give its API a public domain (for example s3.assets.example.com): browsers upload to it.
3. Artbucket. New resource, Docker Image, ghcr.io/pwnera/artbucket:1, port 3000, with your domain (assets.example.com). Environment:

DATABASE_URL=<Postgres internal URL>
S3_ENDPOINT=<MinIO internal URL, e.g. http://minio:9000>
S3_PUBLIC_ENDPOINT=https://s3.assets.example.com
S3_BUCKET=artbucket
S3_ACCESS_KEY_ID=...
S3_SECRET_ACCESS_KEY=...
S3_FORCE_PATH_STYLE=true
APP_URL=https://assets.example.com
BETTER_AUTH_SECRET=<openssl rand -base64 32>
TRUSTED_PROXIES=private

Deploy. The app migrates its database and sets up the bucket on start; make the first account at your domain.

Caution

Until the first account exists, whoever reaches the server can make it, and it is the admin of everything. Make it right away, or set SETUP_TOKEN (openssl rand -base64 24): the first-run form then asks for it.

Coolify can also deploy the source repository’s docker-compose.yml, but its app service sits behind a Compose profile; the image resource above is simpler.