# Deploy with Docker

The easiest way to self-host BentoPDF in a production environment.

## Quick Start

```bash
docker run -d \
  --name bentopdf \
  -p 3000:80 \
  --restart unless-stopped \
  ghcr.io/bentopdf/bentopdf:latest
```

## Docker Compose

Create `docker-compose.yml`:

```yaml
version: '3.8'

services:
  bentopdf:
    image: ghcr.io/bentopdf/bentopdf:latest
    container_name: bentopdf
    ports:
      - "3000:80"
    restart: unless-stopped
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:80"]
      interval: 30s
      timeout: 10s
      retries: 3
```

Run:

```bash
docker compose up -d
```

## Build Your Own Image

```dockerfile
# Dockerfile
FROM node:20-alpine AS builder
WORKDIR /app
COPY package*.json ./
RUN npm ci
COPY . .
RUN npm run build

FROM nginx:alpine
COPY --from=builder /app/dist /usr/share/nginx/html
COPY nginx.conf /etc/nginx/nginx.conf
EXPOSE 80
CMD ["nginx", "-g", "daemon off;"]
```

Build and run:

```bash
docker build -t bentopdf:custom .
docker run -d -p 3000:80 bentopdf:custom
```

## Environment Variables

| Variable | Description | Default |
|----------|-------------|---------|
| `SIMPLE_MODE` | Build without LibreOffice tools | `false` |
| `BASE_URL` | Deploy to subdirectory | `/` |

Example:

```bash
docker run -d \
  -e SIMPLE_MODE=true \
  -p 3000:80 \
  ghcr.io/bentopdf/bentopdf:latest
```

## With Traefik (Reverse Proxy)

```yaml
version: '3.8'

services:
  traefik:
    image: traefik:v2.10
    command:
      - "--providers.docker=true"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.letsencrypt.acme.email=you@example.com"
      - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
      - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./letsencrypt:/letsencrypt

  bentopdf:
    image: ghcr.io/bentopdf/bentopdf:latest
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.bentopdf.rule=Host(`pdf.example.com`)"
      - "traefik.http.routers.bentopdf.entrypoints=websecure"
      - "traefik.http.routers.bentopdf.tls.certresolver=letsencrypt"
    restart: unless-stopped
```

## With Caddy (Reverse Proxy)

```yaml
version: '3.8'

services:
  caddy:
    image: caddy:2
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - caddy_data:/data
    
  bentopdf:
    image: ghcr.io/bentopdf/bentopdf:latest
    restart: unless-stopped

volumes:
  caddy_data:
```

Caddyfile:

```
pdf.example.com {
    reverse_proxy bentopdf:80
}
```

## Resource Limits

```yaml
services:
  bentopdf:
    image: ghcr.io/bentopdf/bentopdf:latest
    deploy:
      resources:
        limits:
          cpus: '1'
          memory: 512M
        reservations:
          cpus: '0.25'
          memory: 128M
```

## Updating

```bash
# Pull latest image
docker compose pull

# Recreate container
docker compose up -d
```