Install GLPI with Docker Compose, Traefik and Let's Encrypt

This article is for those looking for a detailed and straightforward guide on installing GLPI using Docker Compose.

GLPI is an open source IT Asset Management, issue tracking system and service desk system. This software is written in PHP and distributed as open-source software under the GNU General Public License. GLPI is a web-based application helping companies to manage their information system.

TIP

Architecture Context

Choose self-hosted GLPI when you need an open-source IT asset management and helpdesk platform without per-agent licensing fees. ServiceNow or Snipe-IT Cloud provide managed alternatives with deeper ITSM workflows. Self-hosting GLPI is justified when your asset inventory requires on-premises data control or when SaaS per-agent costs exceed the operational overhead of maintaining the platform.

💾 You can find the repository used in this guide on GitHub.

NOTE

We’ll use Traefik as our reverse proxy. It’ll handle obtaining cryptographic certificates from Let’s Encrypt for your domain names and route requests to the corresponding services based on those domains.

CAUTION

Remember that without a secure connection, the services will not work.

CAUTION

To obtain cryptographic certificates, you will need A-type records in the external DNS zone, which point to the IP address of your server where Traefik is installed. If you have created these records recently, you should wait before starting the installation of the services. Full replication of these records between DNS servers can take from a few minutes to 48 hours or even longer in rare cases.

IMPORTANT

Docker Engine and Docker Compose must be installed on the server.

For a step-by-step guide on installing Docker Engine on Ubuntu Server, see Install Docker Engine and Docker Compose on Ubuntu Server

IMPORTANT

OpenSSH must be installed on the server, and port 22 must be open to be able to connect to the server using the SSH protocol.

To install OpenSSH on the server you can use the command:

1
sudo apt install openssh-server

NOTE

To connect to the server from a Windows system, you can use tools like PuTTY or MobaXterm.

NOTE

This guide walks you through connecting to a server with the iTerm2 terminal emulator on macOS.

CAUTION

You will need to open the following TCP ports for access to the services:

• TCP port 80 - to obtain a free cryptographic certificate through the Let’s Encrypt certification center.
• TCP port 443 - to access the GLPI web interface.

We connect to the server on which GLPI is planned to be installed.

Now it is necessary to create networks for your services.

We create a network for Traefik using the command:

1
docker network create traefik-network

We create a network for GLPI using the command:

1
docker network create glpi-network

Next, you need to clone the repository that contains the configuration files, which include all the necessary conditions for GLPI to work.

You can clone the repository using the command:

1
git clone https://github.com/heyvaldemar/glpi-traefik-letsencrypt-docker-compose.git

Navigate to the directory with the repository using the command:

1
cd glpi-traefik-letsencrypt-docker-compose

Next, you need to change the variables in the .env file according to your requirements.

IMPORTANT

The .env file should be in the same directory as glpi-traefik-letsencrypt-docker-compose.yml.

Now let’s start GLPI with the command:

1
docker compose -f glpi-traefik-letsencrypt-docker-compose.yml -p glpi up -d

To access the GLPI management panel, go to https://glpi.heyvaldemar.net from your workstation, where glpi.heyvaldemar.net is the domain name of my service. Accordingly, you need to specify your domain name that points to the IP address of your server with the installed Traefik service, which will redirect the request to GLPI.

NOTE

You need to specify the domain name of the service, previously defined in the .env file.

Select the language and press the “OK” button.

Read the license agreement and press the “Continue” button.

Next, press the “Install” button.

Press the “Continue” button.

Now, it is necessary to specify the server address with the database, as well as the user and password for accessing the database.

Enter the username and password previously set in the .env file, and click the “Continue” button.

Select the database previously set in the .env file, and click the “Continue” button.

Database initialization is complete.

Press the “Continue” button.

Press the “Continue” button.

Press the “Continue” button.

At this step, the usernames and passwords for accessing the GLPI control panel are specified.

Press the “Use GLPI” button.

Specify the username and password for the GLPI administrator account and press the “Sign in” button.

Welcome to the GLPI control panel.

To access the Traefik control panel, go to https://traefik.glpi.heyvaldemar.net from your workstation, where traefik.glpi.heyvaldemar.net is the domain name of my service. Accordingly, you need to specify your domain name that points to the IP address of your server with the installed Traefik.

NOTE

You need to specify the domain name of the service, previously defined in the .env file.

Enter the username and password previously set in the .env file, and click the “OK” button.

Welcome to the Traefik control panel.