1-Click Deploy
One-click app templates. Where Paste & Deploy's Quick Start picker gives you infra building blocks to assemble yourself, 1-Click Deploy is a catalog of curated, complete applications — pick one, name it, click Deploy, done.
How It Works
- Go to 1-Click Deploy
- Pick an app card and click Deploy
- Confirm (or edit) the name
- Optionally enter a domain such as
app.example.com - Click Deploy in the dialog — DockPod generates the compose file for that app and runs
docker compose up -dimmediately
There's no separate "generate then create then deploy" step — one dialog, one click, and the app is live. Every deployed app shows up in Paste & Deploy's list alongside anything you pasted manually — same Redeploy/Stop/Delete controls, since a 1-Click Deploy entry is a Paste & Deploy entry, just created from a template instead of typed by hand.
Domain and HTTPS
The optional domain routes directly to the app's internal container port. It does not use the automatically selected localhost fallback port — for example, Excalidraw is routed to port 80 inside its container even if its host mapping is 127.0.0.1:81.
Point the domain's DNS A/AAAA record to the DockPod server before deploying. DockPod starts the reverse proxy and configures HTTPS automatically. Public domains require an ACME email under Settings → Reverse Proxy. Reserved local domains such as .test use DockPod's local certificate authority instead.
The domain can be changed or removed later from the deployment's Edit dialog. On save, DockPod checks the new hostname against every domain owner in DockPod, removes the old domain-specific environment values, and injects the new values required by that template. Click Redeploy after saving to apply the updated route.
Enter a hostname only — no protocol, path, port, wildcard, underscore, raw IP address, or trailing dot. DockPod normalizes it to lowercase and rejects a hostname already used by any Git Deployment, Paste/1-Click deployment, Panel Domain, or MCP Domain.
Current Catalog
Productivity & Utility
| App | What it is |
|---|---|
| Vaultwarden | Self-hosted, Bitwarden-compatible password manager |
| n8n | Workflow automation — connect apps and APIs without writing code |
| Excalidraw | Collaborative whiteboard for sketching diagrams |
| Homepage | Customizable start page linking out to your self-hosted services |
| Linkding | Minimalist, taggable bookmark manager |
| Trilium Notes | Hierarchical note-taking app for a personal knowledge base |
| Mealie | Recipe manager, meal planner, and collaborative shopping list |
| FreshRSS | Fast RSS reader with automatic background feed refresh |
| PairDrop | AirDrop-style peer-to-peer file sharing across browsers |
CMS & Publishing
| App | What it is |
|---|---|
| Ghost | Modern, hackable blogging and newsletter platform (+ MySQL) |
| WordPress | The world's most popular CMS (+ MySQL) |
| Wiki.js | Modern, git-friendly wiki with a rich Markdown/visual editor (+ PostgreSQL) |
| BookStack | Organize documentation as books, chapters, and pages (+ MySQL) |
| Drupal | Enterprise-grade CMS for complex, structured-content sites (+ MySQL) |
Dev Tools
| App | What it is |
|---|---|
| Gitea | Self-hosted, lightweight Git server with issues, PRs, and CI hooks |
| Metabase | Open-source BI tool — dashboards and charts over your existing databases |
| Code Server | VS Code, running in a browser |
Monitoring & Status
| App | What it is |
|---|---|
| Uptime Kuma | Uptime monitoring, notifications, and public status pages |
| Changedetection.io | Website change monitoring for content, prices, restocks, and alerts |
Documents & Productivity
| App | What it is |
|---|---|
| Stirling PDF | Private browser-based PDF editing, conversion, signing, and OCR |
| Memos | Lightweight, Markdown-native note taking with a timeline-first interface |
Finance
| App | What it is |
|---|---|
| Actual Budget | Local-first personal finance and envelope budgeting |
| Firefly III | Personal finance manager with budgeting, rules, and reports (+ MariaDB) |
More categories (Media, Analytics, Communication) are planned — each app is verified with a real docker compose up before being added to the catalog, so the list grows in batches rather than all at once.
Same Safety Defaults as Paste & Deploy
1-Click Deploy templates follow the same conventions as the Quick Start presets: ports bind to 127.0.0.1 only (never 0.0.0.0), and any credential field (e.g. Vaultwarden's admin token, a companion database's password) gets a cryptographically random value — never a static placeholder.
Apps with a Companion Database
Ghost, WordPress, Wiki.js, BookStack, Drupal, and Firefly III each deploy with their own dedicated database container (not shared with anything provisioned via Database Provisioning) — the database is internal-only, with no host port published, and its credentials are generated once (a real random password, never a static placeholder).
For Ghost, WordPress, Wiki.js, BookStack, and Firefly III, both sides of that credential are shared automatically — the app's own env vars point at the database with the same generated values, so they always match with no extra step. Drupal is the exception: its official image has no equivalent auto-configuration built in — it always lands on its own interactive web install wizard on first visit, so the generated database credentials (visible in the deployed app's env vars, host drupal-mysql) need to be typed into that wizard once, same as any other manual Drupal install.
Template-specific notes
- Stirling PDF starts with login enabled. DockPod generates a random initial admin password and stores it in the deployment environment as
SECURITY_INITIALLOGIN_PASSWORD; the username isadmin. - Mealie starts with public signup disabled. The first account created through the setup flow becomes the initial administrator, and a configured deployment domain is injected into
BASE_URL. - FreshRSS uses its built-in SQLite support and refreshes feeds twice per hour through the image's built-in cron process.
- PairDrop works immediately for local peer-to-peer transfers. Transfers across restrictive NATs may require a separately configured TURN server.
- Changedetection.io uses its lightweight built-in HTTP fetcher by default. Monitoring JavaScript-heavy pages requires adding its optional Playwright browser service manually.
- Firefly III deploys with a dedicated MariaDB database. DockPod generates both its encryption key and database password, and keeps
APP_URLin sync when its domain is edited.
Plan Limits
1-Click Deploy entries count toward the same paste deploys limit as manually-pasted compose files (they're the same underlying resource) — the Deploy button on a card shows an upgrade prompt instead once you're at your plan's limit.