The start of support thread for Documenso

Documenso (Github)

Docker Variables and explanations:

Could you advise on the ones which '????' please.

We are running behind a Nginx Reverse Proxy

Ill update based on your advice to help for others (Which is why ive put them in all in to assist others)

tA

HTTP Port: 3000
The port this docker runs on. default 3000

Example: 3000

NEXT_PUBLIC_WEBAPP_URL

Public base URL used in links/emails (no trailing slash)

Example: https://something.domain.com

NEXTAUTH_URL

Canonical public URL for Auth.js/NextAuth (no trailing slash)

??????????????????????????????

AUTH_TRUST_HOST

Trust reverse proxy headers for Auth.js (true when behind NPM)

???????????????????????????????

NEXT_PUBLIC_DISABLE_SIGNUP

Disable self-service /signup (true = staff invite/guest signing only)

NEXTAUTH_SECRET:

Long random secret for Auth.js/NextAuth (≥32 chars)
Example: 66436772873938711003913006355113

NEXT_PRIVATE_ENCRYPTION_KEY

Primary encryption key for stored secrets (≥32 chars)

Example: 66436772873938711003913006355113

NEXT_PRIVATE_DATABASE_URL

Primary DB URL (with pooling)

Example: postgresql://user:pass@host:5432/db?sslmode=prefer

NEXT_PRIVATE_DIRECT_DATABASE_URL

Direct DB URL (no pooling; migrations/long queries)

Example: postgresql://user:pass@host:5432/db?sslmode=prefer

NEXT_PRIVATE_SMTP_TRANSPORT

NEXT_PRIVATE_SMTP_HOST

NEXT_PRIVATE_SMTP_PORT

NEXT_PRIVATE_SMTP_USERNAME

NEXT_PRIVATE_SMTP_PASSWORD

NEXT_PRIVATE_SMTP_FROM_NAME

NEXT_PRIVATE_SMTP_FROM_ADDRESS

Signing Cert (.p12) Path:

Host path to PKCS#12 certificate

?????????????????????????????????

NEXT_PRIVATE_SIGNING_TRANSPORT

Signing transport (local or cloud provider)

?????????????????????????????????

Thank you so much for building the template for the Unraid Community Apps. I want to share one issue I had with setting up the template and a suggestion....

1. No mention that Postgres is required separately. The template's description doesn't state that Documenso needs its own Postgres instance — I installed the app expecting it to work standalone, and it took a while to realize I needed to separately install something like the Postgresql16 Community App and wire it up myself. Suggest adding a line in the template description pointing users to install Postgres 14+ first (e.g. "Requires a separate PostgreSQL 14+ container — see Postgresql16 in Community Apps") along with example connection string format.

2. NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY isn't included as a template field, but Documenso requires it — without it, signup/login/cron jobs fail with Error: Missing encryption key (from encryptSecondaryData). Should be added as a Required field alongside NEXT_PRIVATE_ENCRYPTION_KEY.

3. Manually added custom variables don't persist their values. When I added the secondary key as a custom variable through the Unraid GUI, docker exec documenso env showed the key present but empty even after re-adding and clicking Apply, repeatedly.

Workaround: Bypassed the template entirely and ran the container manually via docker run with all env vars hardcoded, including a fresh openssl rand -hex 32 value for the secondary key. That resolved it immediately and consistently.

Suggested fix: Add NEXT_PRIVATE_ENCRYPTION_SECONDARY_KEY as a first-class Required field in the template (same as NEXT_PRIVATE_ENCRYPTION_KEY), so users aren't left to discover it's needed via cryptic runtime errors, and to sidestep whatever's causing custom-added variables to drop their values.

Edited August 15Aug 15 by oct
formatting