oidagroup/matomo repository overview

⁠Matomo Worker

Cloud-ready Matomo analytics container with automated setup, CLI installation, and security-hardened configuration.

⁠Features

• Zero-touch installation - Automatic download, CLI-based setup, no web installer required
• Auto-upgrades - Database migrations run automatically on container restart
• Built-in cron - Report archiving and scheduled tasks pre-configured
• Plugin management - Separate volumes for managed and custom plugins
• Security hardened - Whitelist-based PHP execution following official Matomo recommendations
• Non-root execution - Runs as dedicated docker user

⁠Quick Start

docker run -d -p 80:80 \
  -e MATOMO_DOMAIN=matomo.example.com \
  -e MATOMO_DB_HOST=db \
  -e MATOMO_DB_PASSWORD=secret \
  -e MATOMO_ADMIN_PASSWORD=YourSecurePassword \
  -v matomo-config:/matomo/config \
  -v matomo-plugins-managed:/data/plugins-managed \
  -v matomo-plugins-custom:/data/plugins-custom \
  oidagroup/matomo-worker:latest

⁠Prerequisites

Database must exist before starting the container. This image does not create the database - you must create it manually or via your database provisioning process:

CREATE DATABASE matomo CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'matomo'@'%' IDENTIFIED BY 'your_password';
GRANT ALL PRIVILEGES ON matomo.* TO 'matomo'@'%';

⁠Key Environment Variables

⁠TLS/HTTPS

To enable automatic TLS with Let's Encrypt:

-e MATOMO_SSL_ENABLED=true \
-e [email protected] \
-p 443:443

Caddy automatically obtains and renews certificates. Ensure your domain points to the server and port 443 is accessible.

⁠Plugin Directories

This image uses a two-tier plugin system with separate persistent volumes:

Why separate volumes?

• Managed plugins can be auto-updated via MATOMO_MANAGED_PLUGINS_UPDATE=true
• Custom plugins are preserved independently
• Clear separation between infrastructure-managed and user-managed plugins
• Both persist across container restarts and Matomo upgrades

Example with premium plugins:

-e MATOMO_MANAGED_PLUGINS=ExtraTools \
-e MATOMO_PREMIUM_PLUGINS=HeatmapSessionRecording,FormAnalytics \
-e MATOMO_LICENSE_KEY=your_license_key \
-v matomo-plugins-managed:/data/plugins-managed \
-v matomo-plugins-custom:/data/plugins-custom

⁠Volumes