GeoLens

Why this Configuration?

• True Data Sovereignty: 100% GDPR-compliant on-premises deployment. You own your configuration and data without vendor lock-in.
• Hardware Agnostic: Optimized and verified across low-power ARM64 SBCs (Raspberry Pi 5) and x86_64 hypervisors (Proxmox VE LXC & VM).
• Engine Freedom: Tested and supported under standard Docker Engine and unprivileged rootless Podman.
• Platform Verification: Multi-arch ARM64/AMD64. Runs PostGIS, FastAPI, Vite web client.

Quick Start (Standalone Docker Compose)

The snippet below is immediately ready to run in any standard Docker or Podman environment:

services:
  geolens-web:
    image: ghcr.io/geolens-io/geolens-frontend:latest
    container_name: njorddeploy-geolens-web
    restart: unless-stopped
    ports:
      - "8080:80"
    depends_on:
      - geolens-api
    networks:
      - njorddeploy_net

  geolens-api:
    image: ghcr.io/geolens-io/geolens-api:latest
    container_name: njorddeploy-geolens-api
    restart: unless-stopped
    ports:
      - "8001:8000"
    depends_on:
      - geolens-db
    environment:
      - "POSTGRES_HOST=geolens-db"
      - "POSTGRES_DB=geolens"
      - "POSTGRES_USER=geolens"
      - "POSTGRES_PASSWORD=ChangeMeSecurePassword123!"
    volumes:
      - "./data/geolens/data/storage:/data/storage"
    networks:
      - njorddeploy_net

  geolens-db:
    image: postgis/postgis:16-3.4-alpine
    container_name: njorddeploy-geolens-db
    restart: unless-stopped
    environment:
      - "POSTGRES_DB=geolens"
      - "POSTGRES_USER=geolens"
      - "POSTGRES_PASSWORD=ChangeMeSecurePassword123!"
    volumes:
      - "./data/geolens/data/db:/var/lib/postgresql/data"
    networks:
      - njorddeploy_net

networks:
  njorddeploy_net:

Start the service directly via the command line: docker compose up -d

Configuration & Environment Variables

Key configuration parameters and defaults derived from the NjordDeploy component template:

Ecosystem & Enterprise Integration

• Reverse Proxy Ingress Ready: Pre-configured for Caddy, Traefik, or Nginx Proxy Manager with automatic Let's Encrypt TLS certificates.
• Zero-Trust Mesh VPN: Seamless integration with WireGuard or Tailscale/Headscale mesh networks for secure remote administration.
• Transactional State Backups: Ready for point-in-time database dumps and container-safe persistent volume freezing.