Docker Compose
One docker-compose.yaml for the whole stack: backing services,
ovc-backend (API + worker), ovc-webrdp and ovc-frontend, using the
published container images.
Ready to deploy?
quick-install/dockeris a hardened, ready-to-run version of this - everything behind a single nginx entrypoint, Keycloak’s realm auto-imported, the session secret generated on first run. This page explains the why; the linked README has the actual compose file andup.sh/down.sh.
OIDC login
By default ovc-backend and ovc-frontend wire up to Keycloak (or any
other OIDC/OAuth2 provider) for real login - see
OIDC provider and Roles for
how roles are read and what each one grants.
No IdP, quick testing only: set OVC_AUTH_MODE: stub on both
ovc-backend and ovc-frontend instead - every request is then treated as
a fixed admin user, no login and no IdP needed. ovc-frontend shows a
standing warning dialog while this is active; never use it beyond a trusted
network. For local UI development the bypass is also available outside
Docker - see Running in dev mode.
Bring it up
docker compose up -d
curl localhost:8000/api/health # {"ok":true,"db":true,"cache":true,"rabbit":true}
Hosts are added and agents installed from the frontend once you’re logged in - see Running in dev mode › Agent for the Add Host / Setup Agent steps.