Existing Docker server quick start

Prepare the host

Install Docker Engine and the Compose plugin from Docker’s official repository. Keep administrative Compose access restricted; membership in the docker group is effectively root access.

Create explicit paths for the release, mutable data, imports, and the managed library:

bash

install -d -m 0700 /opt/omakase
install -d -m 0750 /srv/omakase/data
install -d -m 0750 /srv/omakase/import
install -d -m 0750 /srv/omakase/library
cd /opt/omakase

Do not mount the Docker socket into Omakase. Keep SQLite on a local filesystem with working locks.

Install one exact private release

Obtain an authorized private release archive or clone through the private channel. Verify the provided commit or archive SHA-256 before continuing.

Copy the example configuration:

bash

cp .env.local.example .env.local
cp .env.local.secrets.example .env.local.secrets
chmod 0600 .env.local.secrets

Set absolute host paths, timezone, UID and GID, deployment mode, public base URL, allowed hosts, and the exact release revision. Put credentials only in the secret file.

Generate the Plus master key outside shell history:

bash

python -c 'import secrets; print(secrets.token_hex(32))'

Save the output directly in your secret manager and secret environment file. Do not paste it into support messages.

Render, build, and start

Render the selected topology before mutation:

bash

docker compose --env-file .env.local -f compose.local.yaml config --quiet
docker compose --env-file .env.local -f compose.local.yaml build --pull omakase-plus
docker compose --env-file .env.local -f compose.local.yaml up -d
docker inspect omakase-local-app --format '{{.State.Health.Status}}'

For the bundled Plex profile:

bash

docker compose --env-file .env.local -f compose.local.yaml \
  --profile plex up -d --build

Keep the application on loopback during the first proof. Configure HTTPS, allowed hosts, and Secure cookies together before making it reachable through a trusted reverse proxy.

Prove the installation

Run Doctor from the release environment:

bash

omakase plus doctor \
  --data-dir /srv/omakase/data \
  --import-root /srv/omakase/import \
  --library-root /srv/omakase/library \
  --acquisition-mode import-only \
  --vpn-mode none \
  --plex-url http://127.0.0.1:32400

Doctor is read-only. It checks directories, capacity, filesystem behavior, SQLite, media probing, Plex reachability, and the selected provider posture.

Do not enable qBittorrent during the first install. Finish login, Plex mapping, one import, subtitle inspection, playback proof, backup, and rollback first.

Next: Local Storage + Plex and Doctor and support bundles.