[{"_1":2,"_166":-5,"_167":-5},"loaderData",{"_3":4,"_13":14,"_21":22,"_141":142},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","routes/_layout",{"_15":-5,"_16":17,"_18":17,"_19":11,"_20":11},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_23":24,"_25":-5,"_26":11,"_27":11,"_28":29,"_30":31,"_32":-5,"_33":11,"_34":35,"_84":-5,"_85":86,"_134":-5,"_135":11,"_136":17,"_137":11,"_138":-5,"_139":140},"canonicalUrl","https://hub.docker.com/r/markdumay/countly-api/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","markdumay","reponame","countly-api","cloudBuildSource","isAutobuildsAvailable","repo",{"_36":37,"_38":39,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":51,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":70,"_75":11,"_76":77,"_81":29,"_82":83},"categories",[],"content_types",[40],"image","date_registered","2020-05-20T06:50:28.735111Z","description","Wrapper for countly/api adding a wait script","is_private","last_updated","2020-06-20T06:50:44.062225Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[52],"application/vnd.docker.container.image.v1+json","name","pull_count",358,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# countly-secret (work in progress)\n\n\n

\n Deploy Countly Analytics as Docker Stack with Secure Credentials\n
\n

\n\n\n\n

\n \n \n \n \n \n \n \n \n \n \n \n \n

\n\n\n

\n About •\n Built With •\n Prerequisites •\n Testing •\n Deployment •\n Usage •\n Donate •\n License\n

\n\n\n## About\n[Countly][countly_info] is an open-source analytics platform to track customer journeys in web, desktop, and mobile applications. The community edition has a free-to-use non-commercial license and can be self-hosted. Countly consists of an API and a portal, using a Mongo database for data persistency. Countly Secret is a configuration script to deploy Countly, a Mongo database, and a reverse proxy as Docker containers. It uses Docker Swarm secrets to secure the database credentials. \n\n\n\n## Built With\nThe project uses the following core software components:\n* [Countly][countly_url] - Analytics platform\n* [Docker][docker_url] - Container platform (including Swarm and Compose)\n* [MongoDB][mongodb_url] - Document-based distributed database\n* [HTTPS Portal][portal_url] - Fully automated HTTPS server\n\n\n## Prerequisites\nCountly Secret can run on a local machine for testing purposes or in a production environment. The setup has been tested locally on macOS and a Virtual Private Server (VPS) running Ubuntu 18.04 LTS.\n\n### Recommended Server Sizing\nIn a minimal setup, Countly and its accompanying Mongo database can be deployed on the same server. For a website with moderate traffic, 2 CPU cores, 4 GB of RAM and 100 GB disk space should be sufficient to get you started. This [overview][countly_deployment] shows the setup for requirements and deployment options for increased workload levels.\n\n### Host Operating System\nAs Countly will be deployed as a Docker container, in theory any host operating system will do, as long as it supports Docker. However, for a production system, a Long Term Support (LTS) version of a major Linux distribution such as Ubuntu or CentOS is recommended. \n\n### Other Prerequisites\n* A registered domain name is required - \nNot only will this help you access the Countly dashboard and API, but it is also required for configuring SSL certificates to enable secure web traffic. You should have the ability to manually configure DNS entries for your domain too.\n\n* Docker Compose and Docker Swarm are required - Countly and the Mongo Database will be deployed as Docker containers in swarm mode to enable Docker *secrets*.\n\n* An email service is optional - Having an email service allows you to receive system notifications from Countly.\n\n\n## Testing\nIt is recommended to test the services locally before deploying them to production. Running the services with `docker-compose` greatly simplifies the validation of the service logs. Below four steps will allow you to run the services on your local machine.\n\n### Step 1 - Clone the Repository\nThe first step is to clone the repository to a local folder. Assuming you are in the working folder of your choice, clone the repository files. Git automatically creates a new folder `countly-secret` and copies the files to this directory. The option `--recurse-submodules` ensures the embedded submodules are fetched too. Now change your working folder to be prepared for the next steps.\n\n```console\ngit clone --recurse-submodules https://github.com/markdumay/countly-secret.git\ncd countly-secret\n```\n\n### Step 2 - Create Docker Secret Files\nAs Docker-compose does not support external Swarm secrets, we will create local secret files for testing purposes. The credentials are stored as plain text, so this is not recommended for production.\n\n```console\nmkdir secrets\nprintf admin > secrets/mongodb_root_username.txt\nprintf password > secrets/mongodb_root_password.txt\nprintf countly > secrets/countly_mongodb_username.txt\nprintf password > secrets/countly_mongodb_password.txt\n```\n\n### Step 3 - Update the Environment Variables\nThe `docker-compose.yml` file uses environment variables to simplify the configuration. You can use the sample file in the repository as a starting point.\n\n```console\nmv sample.env .env\n```\n\nThe `.env` file specifies four variables. Adjust them as needed.\n```\nMONGODB_DATABASE=countly\nDOMAINS_COUNTLY=countly.example.test\nCOUNTLY_API_HOST=http://api:3001\nCOUNTLY_FRONTEND_HOST=http://frontend:6001\n```\n\nIt's convenient to use a `.test` top-level domain for testing. This domain is reserved for this purpose and is guaranteed not to clash with an existing domain name. However, you will still need to resolve these domains on your local machine. Steven Rombauts wrote an excellent [tutorial][macos_dnsmasq] on how to configure this using `dnsmasq` on macOS.\n\n### Step 4 - Run with Docker Compose\nTest the Docker services with `docker-compose`. You can stop the services with the command `ctrl-c`.\n\n```console\ndocker-compose up\n```\n\n### Step 5 - Validate the Service Logs\nThe initialization of the services typically takes a few minutes. Below key messages show the status of the individual services and indicate when they are ready.\n\n```\nmongodb_1 | I CONTROL [initandlisten] options: { net: { bindIp: \"*\" }, security: { authorization: \"enabled\" } }\nmongodb_1 | I NETWORK [listener] Listening on 0.0.0.0\nfrontend_1 | Done.\nfrontend_1 | removed ** packages and audited ** packages in **s\napi_1 | Done.\napi_1 | removed ** packages and audited ** packages in **s\nportal_1 | Self-signing test certificate for countly.example.test\nportal_1 | [services.d] done.\n```\n\n## Deployment\nThe steps for deploying in production are slightly different than for local testing. Below six steps guide you through the setup.\n\n### Step 1 - Clone the Repository\nThe first step is to clone the repository to a local folder. Assuming you are in the working folder of your choice, create a new directory `countly-secret` (or any folder name of your liking) and clone the repository files. The final `.` instructs git to put the files in the current directory.\n\n```console\nmkdir countly-secret\ncd countly-secret\ngit clone https://github.com/markdumay/countly-secret.git .\n```\n\n\n### Step 2 - Create Docker Swarm Secrets\nDocker secrets can be easily created using pipes. The passwords are randomized using `openssl`, but feel free to use another method to your liking. Do not forget the include the final `-`, as this instructs Docker to use piped input. \n\n```console\nprintf admin | docker secret create mongodb_root_username -\nopenssl rand -base64 32 | docker secret create mongodb_root_password -\nprintf countly | docker secret create countly_mongodb_username -\nopenssl rand -base64 32 | docker secret create countly_mongodb_password -\n```\n\nIf you do not feel comfortable copying secrets from your command line, you can use the wrapper `create_secret.sh`. This script prompts for a secret and ensures sensitive data is not displayed in your console. The script is available in the folder `/docker-secret` of your repository.\n\n```console\n./create_secret.sh mongodb_root_username\n./create_secret.sh mongodb_root_password\n./create_secret.sh countly_mongodb_username\n./create_secret.sh countly_mongodb_password\n```\n\n### Step 3 - Update the Docker Compose File\nThe `docker-compose.yml` in the repository defaults to set up for local testing. Update the `secrets` section to use Docker Swarm secrets instead of local files.\n\n```Dockerfile\nsecrets:\n mongodb_root_username:\n external: true\n mongodb_root_password:\n external: true\n countly_mongodb_username:\n external: true\n countly_mongodb_password:\n external: true\n```\n\nIn the same file, instruct HTTPS Portal to request certificates from Let's Encrypt by setting the `STAGE` environment variable to `production`.\n```Dockerfile\nservices:\n portal:\n environment:\n STAGE: production\n```\n\n### Step 4 - Update the Environment Variables\nThe `docker-compose.yml` file uses environment variables to simplify the configuration. You can use the sample file in the repository as a starting point.\n\n```console\nmv sample.env .env\n```\n\nThe `.env` file specifies four variables. Adjust them as needed. Docker creates an alias for the hostnames, so you should not have to rename `api` to `countly_api` or `frontend` to `countly_frontend`.\n```\nMONGODB_DATABASE=countly\nDOMAINS_COUNTLY=countly.example.com\nCOUNTLY_API_HOST=http://api:3001\nCOUNTLY_FRONTEND_HOST=http://frontend:6001\n```\n\n\n### Step 5 - Run with Docker Stack\nUnlike Docker Compose, Docker Stack does not automatically create local folders. Create an empty folder for the Mongo database and the HTTPS portal. Next, deploy the Docker Stack using `docker-compose` as input. This ensures the environment variables are parsed correctly.\n\n```console\nmkdir data\nmkdir data/mongodb\nmkdir data/portal\ndocker-compose config | docker stack deploy -c - countly\n```\n\n### Step 6 - Inspect the Status of the Stack\nRun the following command to inspect the status of the Docker Stack.\n\n```console\ndocker stack services countly\n```\n\nYou should see the value `1/1` for `REPLICAS` for each service if the stack was initialized correctly. It might take a while before the services are up and running, so simply repeat the command after a few minutes if needed.\n\n```\nID NAME MODE REPLICAS IMAGE PORTS\n*** countly_frontend global 1/1 markdumay/countly-frontend:20.04\n*** countly_portal replicated 1/1 steveltn/https-portal:1 *:80->80/tcp, *:443->443/tcp\n*** countly_api replicated 1/1 markdumay/countly-api:20.04\n*** countly_mongodb replicated 1/1 mongo:4.2\n```\n\nDebugging swarm services can be quite challenging. If for some reason your service does not initiate properly, you can get its task ID with `docker service ps `. Running `docker inspect ` might give you some clues to what is happening. If the service did initiate correctly, you can view the service log with `docker service logs `. Use `docker stack rm countly` to remove the docker stack entirely. Be aware not to redeploy the stack before all services and networks have been completely removed, as this might result in [errors][issue_30942].\n\n\n## Usage\nOpen your internet browser and navigate to the URL specified in your `.env` file. The default value is `countly.example.test` or `countly.example.com` pending you are in test mode or production. The site's certificate is self-signed in a local setup, so you might need to instruct your internet browser to trust this certificate. The site should now display the welcome screen of Countly and will ask you to set up an administrative user. \n\n![Countly setup screen][image_setup]\n\nIf you do not see the full dashboard, try to log in again. Countly is now ready for use.\n\n![Countly home screen][image_home]\n\n\n## Contributing\n1. Clone the repository and create a new branch \n ```\n $ git checkout https://github.com/markdumay/countly-secret.git -b name_for_new_branch\n ```\n2. Make and test the changes\n3. Submit a Pull Request with a comprehensive description of the changes\n\n## Donate\n $\"Buy$ \n\n## License\n\n

\n\n\nCopyright © [Mark Dumay][blog]\n\n\n\n\n[countly_deployment]: https://support.count.ly/hc/en-us/articles/360037814151-Deployment-scenarios\n[countly_info]: https://count.ly/product\n[countly_url]: https://count.ly\n[docker_url]: https://docker.com\n[issue_30942]: https://github.com/moby/moby/issues/30942\n[macos_dnsmasq]: https://www.stevenrombauts.be/2018/01/use-dnsmasq-instead-of-etc-hosts/\n[mongodb_url]: https://mongodb.com\n[portal_url]: https://github.com/SteveLTN/https-portal\n\n[blog]: https://github.com/markdumay\n[repository]: https://github.com/markdumay/countly-secret.git\n\n\n[image_setup]: images/countly-setup.png\n[image_home]: images/countly-home.png\n\n","has_starred","hub_user","immutable_tags_settings",{"_71":11,"_72":73},"enabled","rules",[74],".*","is_automated","permissions",{"_78":17,"_79":11,"_80":11},"read","write","admin","user","storage_size",592663204,"orgData","recentTags",[87,125],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":96,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},"content_type","creator",9595884,"full_size",592610916,"id",101188769,"images",[97],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"architecture","amd64","digest","sha256:7a53ebe52139cca8d751d2c83aa5fc1e413ea3104f12fb654f0d8577f3b721de","features","","last_pulled","2026-09-11T19:23:41.605001345Z","last_pushed","2020-05-20T07:32:40Z","os","linux","os_features","os_version","size","variant","2020-06-20T06:50:43.647775Z","last_updater","last_updater_username","media_type","latest","repository",9078907,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_88":40,"_89":90,"_91":92,"_93":126,"_95":127,"_46":132,"_115":90,"_116":29,"_117":52,"_53":133,"_119":120,"_121":130,"_122":132,"_123":62,"_124":17},101185149,[128],{"_98":99,"_100":129,"_102":103,"_104":130,"_106":131,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},"sha256:24b8aabc03ef8c2ef46b415ef8278c336eaad6839ff275d9ac8117252fadce73","2026-09-11T19:09:43.419907063Z","2020-05-20T07:26:16Z","2020-06-20T06:43:27.545545Z","20.04","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"routes/_layout.r.$namespace.$reponame.tags",{"_34":143,"_150":151,"_139":164,"_165":11},{"_36":144,"_38":145,"_41":42,"_43":44,"_45":11,"_46":47,"_48":49,"_50":146,"_53":31,"_28":29,"_54":55,"_56":40,"_57":58,"_59":60,"_61":62,"_63":-5,"_64":58,"_65":66,"_67":11,"_68":29,"_69":147,"_75":11,"_76":149,"_81":29,"_82":83},[],[40],[52],{"_71":11,"_72":148},[74],{"_78":17,"_79":11,"_80":11},"tags",{"_152":153,"_154":-5,"_155":-5,"_156":157},"count",2,"next","previous","results",[158,161],{"_88":40,"_89":90,"_91":92,"_93":94,"_95":159,"_46":114,"_115":90,"_116":29,"_117":52,"_53":118,"_119":120,"_121":105,"_122":114,"_123":62,"_124":17},[160],{"_98":99,"_100":101,"_102":103,"_104":105,"_106":107,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},{"_88":40,"_89":90,"_91":92,"_93":126,"_95":162,"_46":132,"_115":90,"_116":29,"_117":52,"_53":133,"_119":120,"_121":130,"_122":132,"_123":62,"_124":17},[163],{"_98":99,"_100":129,"_102":103,"_104":130,"_106":131,"_108":109,"_110":103,"_111":-5,"_112":92,"_59":62,"_113":-5},[],"canDeleteTags","actionData","errors"]

markdumay/countly-api

Tags for markdumay/countly-api