Docker & Compose

​

Run it

docker run -d -p 8137:8137 -v oh-data:/data ghcr.io/openheaders/ohd:latest

docker run -d -p 8137:8137 -v oh-data:/data ghcr.io/openheaders/ohd:2026.8.4

​

Compose

services:
  ohd:
    image: ghcr.io/openheaders/ohd:2026.8.4
    restart: unless-stopped
    ports:
      - "8137:8137"
    volumes:
      - oh-data:/data

volumes:
  oh-data:

​

Operating a containerized daemon

• First token: ohd show-token needs the daemon stopped and the same data dir. Stop the container, then run it against the volume:
  docker stop <container>
  docker run --rm -v oh-data:/data ghcr.io/openheaders/ohd:2026.8.4 show-token --data-dir /data
  docker start <container>
  
• Settings work the same way (stopped daemon, same volume):
  docker run --rm -v oh-data:/data ghcr.io/openheaders/ohd:2026.8.4 config set mcp.enabled true --data-dir /data
  
• TLS: the container answers cleartext on its bind; put a TLS-terminating reverse proxy in front for anything beyond a trusted network, exactly as on a native install — see LAN vs TLS proxy.
• Upgrade: pull the newer tag and recreate the container; state rides the volume. ohd upgrade is for native binaries only.
• Backup: stop the container and snapshot with the same tooling — see Backup & restore:
  docker run --rm -v oh-data:/data -v "$PWD/backups:/backups" \
    ghcr.io/openheaders/ohd:2026.8.4 backup /backups/oh-2026-08-22 --data-dir /data