docuseal v0.1.0

Apps

DocuSeal — an open-source document signing platform (a self-hosted DocuSign alternative): build fillable PDF forms, send them for signature, and collect legally-binding e-signatures, with an API and audit log. Deployed as a host-networked Nomad service using SQLite with a persistent data volume.

nomad-pack run docuseal --registry nomploy

…or one line (add registry + run)

curl -fsSL https://packs.nomploy.com/install.sh | sh -s -- docuseal

Needs nomad-pack on PATH. The script only adds the nomploy registry and runs this pack.

Source ↗ Project ↗ ★ 18.6k ⚑ Report an issue

1 task http 3026 1 volume image docuseal/docuseal:latest tracks :latest image bumped today

Variables 9

values.hcl

Save as values.hcl, edit, then run:

nomad-pack run docuseal -f values.hcl --registry nomploy

# The name of the Nomad job.
job_name = "docuseal"

# The Nomad namespace to deploy into.
namespace = "default"

# The datacenters to deploy to.
datacenters = ["*"]

# The DocuSeal container image. Pin a tag in production.
image = "docuseal/docuseal:latest"

# Host port for the DocuSeal web UI (PORT).
port = 3026

# Secret used to sign sessions and cookies (SECRET_KEY_BASE). CHANGE THIS — generate with: openssl rand -hex 64.
secret_key_base = "change-me-openssl-rand-hex-64"

# Named volume for DocuSeal data (/data): the SQLite database and uploaded documents.
data_volume = "docuseal_data"

# Placement constraints. Pin to the node holding the volume. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
constraints = []

# Resources for the DocuSeal task.
resources = {
    cpu    = 500
    memory = 512
  }

Name	Type	Default	Description
job_name	string	"docuseal"	The name of the Nomad job.
namespace	string	"default"	The Nomad namespace to deploy into.
datacenters	list	["*"]	The datacenters to deploy to.
image	string	"docuseal/docuseal:latest"	The DocuSeal container image. Pin a tag in production.
port	number	3026	Host port for the DocuSeal web UI (PORT).
secret_key_base set me	string	"change-me-openssl-rand-hex-64"	Secret used to sign sessions and cookies (SECRET_KEY_BASE). CHANGE THIS — generate with: openssl rand -hex 64.
data_volume	string	"docuseal_data"	Named volume for DocuSeal data (/data): the SQLite database and uploaded documents.
constraints	list	[]	Placement constraints. Pin to the node holding the volume. On a nomploy cluster: attribute = "$${meta.nomploy_control_plane}", operator = "=", value = "true".
resources	object	{ cpu = 500 memory = 512 }	Resources for the DocuSeal task.

Back up this pack

This pack stores data in one Docker named volume: docuseal_data

restic

# Run on the node hosting this pack. Point restic at your repo first:
#   export RESTIC_REPOSITORY="s3:https://<account>.r2.cloudflarestorage.com/<bucket>"
#   export RESTIC_PASSWORD="<repo-password>"
#   export AWS_ACCESS_KEY_ID=<key>  AWS_SECRET_ACCESS_KEY=<secret>
restic backup \
  /var/lib/docker/volumes/docuseal_data/_data

rclone (sync to S3/R2)

rclone sync /var/lib/docker/volumes/docuseal_data/_data backup:<bucket>/docuseal_data

Paths assume the default Docker volume location (/var/lib/docker/volumes). Restore by stopping the job, restoring files into the same volume, and re-running the pack.

Readme

docuseal

DocuSeal — an open-source document signing platform and a self-hosted DocuSign alternative. Build fillable PDF forms with a drag-and-drop editor, send them for signature, and collect legally-binding e-signatures, with a REST API, templates, and an audit trail.

Single host-networked Nomad service using SQLite with a persistent data volume.

Deploy

nomad-pack registry add nomploy https://github.com/Nomploy/nomad-packs
nomad-pack run docuseal --registry=nomploy

Configure

Variable	Default	Description
`port`	`3026`	Web UI port (`PORT`).
`secret_key_base`	`change-me-…`	`SECRET_KEY_BASE` — signs sessions/cookies. Change it (`openssl rand -hex 64`).
`data_volume`	`docuseal_data`	`/data` — SQLite database and uploaded documents.
`image`	`docuseal/docuseal:latest`	Container image. Pin a tag in production.
`resources`	`{ cpu = 500, memory = 512 }`	Task resources.

On first run, open the UI to create the admin account. Uses SQLite by default; to switch to PostgreSQL, add a DATABASE_URL env var to the task. To email signing requests, configure SMTP (SMTP_ADDRESS, SMTP_PORT, SMTP_USERNAME, SMTP_PASSWORD). Serves plain HTTP — front it with a reverse proxy for TLS. Pin the job to the node holding the volume with constraints.