Self-host Reliquary

Run Reliquary on your own server with Docker Compose: the web app, the MCP endpoint, Postgres and Supabase Auth, with HTTPS from Caddy.

Self-hosting is a preview. Reliquary's server is under the Functional Source License (FSL-1.1-ALv2): you may run it yourself for any purpose, at any size, except offering it to others as a competing product or service, and each version becomes Apache 2.0 two years after its release. Hosting Reliquary for others needs a commercial license: write to andres@redmage.cc. The CLI is MIT.

What you need

A Linux server with Docker and its Compose plugin, or Podman with podman compose. 2 GB of memory is enough to start.
A checkout of Reliquary's source on that server.
An SMTP server that can send email: sign-in codes go out through it. What it sends: Emails.
Optional: a Resend account, to email vault invites. Without one, owners copy invite links and send them themselves. See Email for invites.
For HTTPS: two hostnames pointing at the server, one for the app and one for MCP (for example app.example.com and mcp.example.com), and ports 80 and 443 open.

What runs

Service	What it does
`db`	Postgres 17. Its data is in the `db-data` volume. Never published outside the stack.
`auth`	Supabase Auth: email codes and sessions. Only the web app talks to it.
`db-init`, `migrate`	Run once on every start: prepare the database, then apply Reliquary's migrations.
`web`	The web app: sign-in, vaults, review, variables, the docs.
`mcp`	The MCP endpoint your agents connect to.
`caddy`	Optional (profile `caddy`): HTTPS certificates from Let's Encrypt, renewed on its own.

Everyone on a self-hosted instance has no plan limits: any number of vaults, people and storage. See Plans and limits.

Set it up

From the checkout, write the settings file. Use your own hostnames and SMTP server:
```
PUBLIC_URL=https://app.example.com \
MCP_RESOURCE=https://mcp.example.com/mcp \
SMTP_HOST=smtp.example.com SMTP_PORT=587 SMTP_SENDER=reliquary@example.com \
ACME_EMAIL=you@example.com \
  deploy/setup.sh
```
This writes deploy/compose/.env (readable only by you) and generates every secret in it: the database passwords, the key that signs sessions and the key that encrypts variables. It prints the names of what it set, never a value. Run it again at any time: it never replaces a secret that is already there.
Put your SMTP user name and password in deploy/compose/.env (SMTP_USER and SMTP_PASS) with an editor, so they don't land in your shell history.
Keep a copy of deploy/compose/.env in a password manager. Without VARIABLES_KEYS, no stored variable can ever be read again. Never commit it or paste it anywhere.
Start it, with HTTPS:
```
cd deploy/compose
docker compose --profile caddy up -d --build
```
With Podman, use podman compose instead of docker compose. The first start builds the two images and takes a few minutes.

Make the first account, yours:

docker compose run --rm owner you@example.com

Open your PUBLIC_URL, enter that address, and sign in with the code from the email.

Reliquary is invite-only there too: add people from a vault's Settings, Members. See Invite someone. The first account is admitted, so it can create vaults. An account made any other way (the owner command again, or signing up without an invite) can sign in and join vaults it's invited to, but can't create its own until someone invites it or you admit it with scripts/plan.sh admit <email>.

Email for invites

Sign-in email goes through your SMTP server. Vault invites are sent by the web app itself, through Resend's API, and only if you set both of these in deploy/compose/.env (with an editor, like the SMTP password):

RESEND_API_KEY: a Resend API key with Sending access only.
EMAIL_FROM: the sender, on a domain you verified in Resend, for example Reliquary <no-reply@notify.example.com>.

Then docker compose up -d again. Leave both empty to keep invites by link only. With only one set, or a malformed one, nothing is emailed and docker compose logs web says which setting is wrong. If an email can't be sent, the invite is still made and the owner sees the link to copy, with the reason and a reference.

Feedback from your people

People on your instance can send feedback from the top bar, and their agents with send_feedback. It goes to you, the operator of this instance, never to Red Mage. Read it and answer with scripts/feedback.sh (it lists, shows, sets a status and replies), run where you run scripts/plan.sh.

To be emailed about each new item, set FEEDBACK_EMAIL in deploy/compose/.env to your address, beside RESEND_API_KEY and EMAIL_FROM. Without it nothing is emailed, and the feedback waits for scripts/feedback.sh list.

Connect your agents

Your MCP URL is your MCP_RESOURCE, for example https://mcp.example.com/mcp. Use it wherever the guides say https://mcp.reliquary.redmage.cc/mcp: Connect Claude Code, Connect another client.

For the CLI, name your server once: reliquary login --server https://app.example.com. See Use the CLI.

Try it on one machine

Without hostnames or HTTPS, for a look around on your own computer:

PUBLIC_URL=http://127.0.0.1:8790 MCP_RESOURCE=http://127.0.0.1:8787/mcp \
SMTP_HOST=smtp.example.com SMTP_SENDER=reliquary@example.com \
  deploy/setup.sh
cd deploy/compose
docker compose up -d --build
docker compose run --rm owner you@example.com

Then open http://127.0.0.1:8790. Over plain http, session cookies can't be marked secure, so use this for a trial only.

Behind your own proxy

Leave out --profile caddy. The web app listens on 127.0.0.1:8790 and MCP on 127.0.0.1:8787 (change WEB_BIND and MCP_BIND in .env). Your proxy must end TLS for both hostnames. Set TRUST_PROXY_IP=1 only if it overwrites the X-Real-IP header with the client's address; rate limits count by it.

Upgrade

git pull
cd deploy/compose
docker compose --profile caddy up -d --build

Every start applies the migrations the database hasn't had yet, each in one transaction, and nothing else. To run them on their own: docker compose run --rm migrate.

Back up

The data is in the db-data volume. A dump of the whole database:

cd deploy/compose
docker compose exec -T db pg_dump -U postgres -Fc postgres > reliquary.dump

Keep dumps with the same care as .env: they hold every file and every encrypted variable. A vault's own export (its Settings) is a readable copy of its files, without variable values. See Export, delete and erase.

Stop or remove it

Stop: docker compose --profile caddy down. Your data stays in the volume.
Remove everything, data included: docker compose --profile caddy down -v. This can't be undone.

If something fails

docker compose ps -a shows each service's state. db-init and migrate should say they exited with code 0.
docker compose logs web (or mcp, auth, migrate) shows why a service stopped. The apps refuse to start when a setting is missing and name the setting, never its value.
An error page or tool error ends with a reference: find it in docker compose logs web or docker compose logs mcp. See Errors and reference IDs.