Why this Configuration?

True Data Sovereignty: 100% GDPR-compliant on-premises deployment. You own your configuration and data without vendor lock-in.
Hardware Agnostic: Optimized and verified across low-power ARM64 SBCs (Raspberry Pi 5) and x86_64 hypervisors (Proxmox VE LXC & VM).
Engine Freedom: Tested and supported under standard Docker Engine and unprivileged rootless Podman.
Platform Verification: Tested on Proxmox LXC: docker (v3.2.1, 2026-09-14), podman (1.19, 2026-09-14); Proxmox VM: docker (v3.2.1, 2026-09-14), podman (1.19, 2026-09-14).

Quick Start (Standalone Docker Compose)

The snippet below is immediately ready to run in any standard Docker or Podman environment:

services:
  plausible:
    image: "ghcr.io/plausible/community-edition:v3.2.1"
    container_name: njorddeploy-plausible
    restart: unless-stopped
    command: sh -c "until /entrypoint.sh db createdb; do echo 'Waiting for databases to be ready...'; sleep 3; done && /entrypoint.sh db migrate && /entrypoint.sh run"
    depends_on:
      - njorddeploy-plausible-db
      - njorddeploy-plausible-events-db
    ports:
      - "8000:8000"
    environment:
      - "BASE_URL=http://localhost:8000"
      - "SECRET_KEY_BASE=MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3"
      - "TOTP_VAULT_KEY=MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDE="
      - "DATABASE_URL=postgres://postgres:plausible_secure_postgres_pass@njorddeploy-plausible-db:5432/plausible_db"
      - "CLICKHOUSE_DATABASE_URL=http://njorddeploy-plausible-events-db:8123/plausible_events_db"
      - "HTTP_PORT=8000"
    networks:
      - njorddeploy_net

  njorddeploy-plausible-db:
    image: postgres:16-alpine
    container_name: njorddeploy-plausible-db
    restart: unless-stopped
    user: "0:0"
    volumes:
      - "./data/plausible/db-data:/var/lib/postgresql/data"
    environment:
      - "POSTGRES_DB=plausible_db"
      - "POSTGRES_USER=postgres"
      - "POSTGRES_PASSWORD=plausible_secure_postgres_pass"
    networks:
      - njorddeploy_net

  njorddeploy-plausible-events-db:
    image: clickhouse/clickhouse-server:24.12-alpine
    container_name: njorddeploy-plausible-events-db
    restart: unless-stopped
    user: "0:0"
    volumes:
      - "./data/plausible/event-data:/var/lib/clickhouse"
      - "./data/plausible/event-logs:/var/log/clickhouse-server"
      - "data_root/plausible/logs.xml:/etc/clickhouse-server/config.d/logs.xml:ro"
      - "data_root/plausible/ipv4-only.xml:/etc/clickhouse-server/config.d/ipv4-only.xml:ro"
      - "data_root/plausible/low-resources.xml:/etc/clickhouse-server/config.d/low-resources.xml:ro"
      - "data_root/plausible/default-profile-low-resources-overrides.xml:/etc/clickhouse-server/users.d/default-profile-low-resources-overrides.xml:ro"
    environment:
      - "CLICKHOUSE_SKIP_USER_SETUP=1"
    networks:
      - njorddeploy_net

networks:
  njorddeploy_net:

Start the service directly via the command line: docker compose up -d

Configuration & Environment Variables

Key configuration parameters and defaults derived from the NjordDeploy component template:

Variable	Default Value	Description
`PLAUSIBLE_WEB_PORT`	`8000`	The external HTTP port for accessing the Plausible web UI.
`PLAUSIBLE_BASE_URL`	`http://localhost:8000`	The domain or URL where Plausible will be accessed (e.g. http://192.168.1.50:8000 or https://analytics.example.com).
`PLAUSIBLE_SECRET_KEY_BASE`	`MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDEyMzQ1Njc4OTAxMjM0NTY3`	A 64+ character random string used for session encryption (generate with V8OoCXdxEwZXASKz5/rGF1TCSIG3Os9Z5/gTA0H8l8gg0OxVJdbqCO+XTxNsu/vM).
`PLAUSIBLE_TOTP_VAULT_KEY`	`MDEyMzQ1Njc4OTAxMjM0NTY3ODkwMTIzNDU2Nzg5MDE=`	A 32-byte Base64-encoded key for encrypting 2FA TOTP secrets (generate with mpPzJaVW0iIkfPcqQu2ND2PFVb4RE74ORVdOAqDYUlw=).
`POSTGRES_DB`	`plausible_db`	The PostgreSQL database name for Plausible.
`POSTGRES_USER`	`postgres`	The PostgreSQL user for Plausible.
`POSTGRES_PASSWORD`	`plausible_secure_postgres_pass`	The PostgreSQL password for Plausible.

Ecosystem & Enterprise Integration

Reverse Proxy Ingress Ready: Pre-configured for Caddy, Traefik, or Nginx Proxy Manager with automatic Let's Encrypt TLS certificates.
Zero-Trust Mesh VPN: Seamless integration with WireGuard or Tailscale/Headscale mesh networks for secure remote administration.
Transactional State Backups: Ready for point-in-time database dumps and container-safe persistent volume freezing.

Effortless Management with NjordDeploy

Deploy, monitor, and update this service with a single click on your own hardware via the NjordDeploy Configurator.

Download NjordDeploy Suite Inspect GitHub Template Official Project Website All 128+ Services

Plausible Analytics

Why this Configuration?

Quick Start (Standalone Docker Compose)

Configuration & Environment Variables

Ecosystem & Enterprise Integration

Effortless Management with NjordDeploy