Docker + Custom Domain

OpenAlgo Docker Installation Script

Quick Start

This script provides a simplified, automated installation of OpenAlgo using Docker on Ubuntu/Debian systems with custom domain and SSL.

One-Line Installation

wget https://raw.githubusercontent.com/marketcalls/openalgo/refs/heads/main/install/install-docker.sh && chmod +x install-docker.sh && ./install-docker.sh

Prerequisites

• Fresh Ubuntu 20.04+ or Debian 11+ server

• Root access OR non-root user with sudo privileges

• Domain name pointed to your server IP

• Server with at least 1GB RAM (2GB recommended)

Installation Steps

Option 1: As Non-Root User (Recommended)

# If you're logged in as root, create a non-root user first
adduser openalgo
usermod -aG sudo openalgo
su - openalgo

# Download and run the script
wget https://raw.githubusercontent.com/marketcalls/openalgo/refs/heads/main/install/install-docker.sh
chmod +x install-docker.sh
./install-docker.sh

Option 2: As Root User

# Download and run directly
wget https://raw.githubusercontent.com/marketcalls/openalgo/refs/heads/main/install/install-docker.sh
chmod +x install-docker.sh
./install-docker.sh
# (Confirm when prompted to proceed as root)

Note: While the script works as root, using a non-root user is recommended for better security in production environments.

Follow the Prompts

The script will ask you for:

• Domain name (e.g., demo.openalgo.in)

• Broker name from the supported list

• Broker API credentials (key and secret)

• Market data credentials (for XTS brokers only)

• Email for SSL certificate notifications

• Confirmation to proceed

What the Script Does

1. ✅ Updates system packages

2. ✅ Installs Docker & Docker Compose

3. ✅ Installs Nginx web server

4. ✅ Installs Certbot for SSL

5. ✅ Clones OpenAlgo repository to /opt/openalgo

6. ✅ Configures environment variables

7. ✅ Sets up firewall (UFW)

8. ✅ Obtains SSL certificate from Let's Encrypt

9. ✅ Configures Nginx with SSL and WebSocket support

10. ✅ Builds and starts Docker container

11. ✅ Creates management helper scripts

Installation typically takes 5-10 minutes.

After Installation

1. Visit https://yourdomain.com in your browser

2. Create your admin account

3. Login to OpenAlgo

4. Complete broker authentication using OAuth

Management Commands

The installation creates these helper commands:

# View application status
openalgo-status

# View live logs (follow mode)
openalgo-logs

# Restart application
openalgo-restart

# Create backup
openalgo-backup

Docker Commands

# Navigate to installation directory
cd /opt/openalgo

# Restart container
sudo docker compose restart

# Stop container
sudo docker compose stop

# Start container
sudo docker compose start

# View logs
sudo docker compose logs -f

# Rebuild from scratch
sudo docker compose down
sudo docker compose build --no-cache
sudo docker compose up -d

File Locations

Item	Location
Installation	/opt/openalgo
Configuration	/opt/openalgo/.env
Database	Docker volume openalgo_db
Application Logs	/opt/openalgo/log
Broker Logs	/opt/openalgo/logs
Nginx Config	/etc/nginx/sites-available/yourdomain.com
SSL Certificates	/etc/letsencrypt/live/yourdomain.com/
Backups	/opt/openalgo-backups/

Updating OpenAlgo

cd /opt/openalgo

# Create backup first
openalgo-backup

# Stop container
sudo docker compose down

# Pull latest code
sudo git pull origin main

# Rebuild and restart
sudo docker compose build --no-cache
sudo docker compose up -d

# Verify
openalgo-status

Troubleshooting

Container not starting:

# Check container status
sudo docker ps -a

# View detailed logs
sudo docker compose logs -f

# Check container health
sudo docker inspect openalgo-web --format='{{.State.Health.Status}}'

Permission errors with logs:

# Fix log directory permissions
cd /opt/openalgo
sudo chown -R 1000:1000 log logs
sudo docker compose restart

WebSocket connection issues:

# Check if ports are listening
sudo netstat -tlnp | grep -E ':(5000|8765)'

# Test WebSocket connection
curl -i -N \
  -H "Connection: Upgrade" \
  -H "Upgrade: websocket" \
  https://yourdomain.com/ws

Nginx issues:

# Test configuration
sudo nginx -t

# View error logs
sudo tail -f /var/log/nginx/yourdomain.com_error.log

# Restart Nginx
sudo systemctl restart nginx

SSL certificate issues:

# Test renewal
sudo certbot renew --dry-run

# Force renewal
sudo certbot renew --force-renewal

# Check certificate status
sudo certbot certificates

Docker issues:

# Check Docker status
sudo systemctl status docker

# Restart Docker
sudo systemctl restart docker

# View Docker logs
sudo journalctl -u docker -f

Firewall Configuration

The script automatically configures UFW:

• Port 22 (SSH) - Open

• Port 80 (HTTP) - Open (for SSL renewal)

• Port 443 (HTTPS) - Open

• Ports 5000, 8765 - Only accessible via localhost (Docker ports)

Security Best Practices

1. Change default credentials immediately after first login

2. Keep system updated:

   sudo apt update && sudo apt upgrade -y

3. Monitor logs regularly:

   openalgo-logs

4. Setup automated backups: Create a cron job

   # Backup daily at 2 AM
   crontab -e
   # Add: 0 2 * * * /usr/local/bin/openalgo-backup

5. Use strong passwords for your OpenAlgo account

6. Never share broker credentials with anyone

7. Review firewall rules periodically:

   sudo ufw status

Cloudflare Setup (Optional)

For additional security and CDN benefits:

1. Add domain to Cloudflare

   • Sign up at cloudflare.com

   • Add your domain

2. Update DNS

   • In Cloudflare DNS settings:

   • Create A record pointing to your server IP

   • Enable proxy (orange cloud icon)

3. Configure SSL/TLS

   • Go to SSL/TLS settings

   • Set mode to "Full (strict)"

   • Enable "Always Use HTTPS"

4. Enable WebSockets

   • Go to Network settings

   • Enable "WebSockets"

   • Enable "HTTP/2"

5. Security Settings (Optional)

   • Enable "Under Attack Mode" if needed

   • Set up Page Rules for caching

   • Configure Firewall Rules

Backup and Restore

Create Backup:

openalgo-backup

Backups are stored in /opt/openalgo-backups/ and include:

• Database

• Configuration (.env file)

• Strategy files

• Last 7 backups are kept automatically

Restore from Backup:

# Stop container
cd /opt/openalgo
sudo docker compose stop

# Extract backup (replace TIMESTAMP with actual value)
sudo tar -xzf /opt/openalgo-backups/openalgo_backup_TIMESTAMP.tar.gz -C /opt/openalgo

# Fix permissions
sudo chown -R 1000:1000 log logs

# Start container
sudo docker compose start

# Verify
openalgo-status

Complete Uninstallation

# Stop and remove container
cd /opt/openalgo
sudo docker compose down -v

# Remove installation directory
sudo rm -rf /opt/openalgo

# Remove backups (optional)
sudo rm -rf /opt/openalgo-backups

# Remove Nginx configuration
sudo rm /etc/nginx/sites-available/yourdomain.com
sudo rm /etc/nginx/sites-enabled/yourdomain.com
sudo systemctl reload nginx

# Remove SSL certificate
sudo certbot delete --cert-name yourdomain.com

# Remove management scripts
sudo rm /usr/local/bin/openalgo-*

# Optional: Remove Docker (if not needed for other apps)
sudo apt remove -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
sudo rm -rf /var/lib/docker

Getting Help

• Documentation: https://docs.openalgo.in

• Discord Community: https://discord.com/invite/UPh7QPsNhP

• GitHub Issues: https://github.com/marketcalls/openalgo/issues

• YouTube Tutorials: https://youtube.com/@openalgoHQ

• Website: https://openalgo.in

Supported Brokers

Broker	Code	XTS API
5paisa	fivepaisa	No
5paisa XTS	fivepaisaxts	Yes
AliceBlue	aliceblue	No
Angel One	angel	No
Compositedge	compositedge	Yes
Definedge	definedge	No
Dhan	dhan	No
Dhan Sandbox	dhan_sandbox	No
Firstock	firstock	No
Flattrade	flattrade	No
Fyers	fyers	No
Groww	groww	No
IBulls	ibulls	Yes
IIFL	iifl	Yes
IndMoney	indmoney	No
Kotak	kotak	No
Motilal Oswal	motilal	No
Paytm Money	paytm	No
Pocketful	pocketful	No
Shoonya	shoonya	No
Tradejini	tradejini	No
Upstox	upstox	No
Wisdom Capital	wisdom	Yes
Zebu	zebu	No
Zerodha	zerodha	No

Note: XTS API brokers require additional market data API credentials during installation.

System Requirements

Minimum:

• 1 vCPU

• 1GB RAM

• 10GB disk space

• Ubuntu 20.04+ or Debian 11+

• Internet connection

Recommended:

• 2 vCPU

• 2GB RAM

• 20GB SSD storage

• Ubuntu 22.04 LTS

• Stable internet connection

Architecture

┌─────────────────┐
│   Internet      │
└────────┬────────┘
         │ HTTPS (443)
         │
┌────────▼────────┐
│   Nginx         │ ← SSL/TLS, Rate Limiting
│   Reverse Proxy │
└────────┬────────┘
         │
    ┌────┴────┐
    │         │
    ▼         ▼
┌───────┐ ┌──────────┐
│ Flask │ │WebSocket │ ← Docker Container
│ :5000 │ │  :8765   │   (openalgo-web)
└───────┘ └──────────┘
    │
    ▼
┌──────────┐
│ SQLite   │ ← Docker Volume
│ Database │   (openalgo_db)
└──────────┘

FAQ

Q: Can I use this on a server with existing Nginx? A: Yes, but you may need to manually merge configurations to avoid conflicts.

Q: Can I use a different port instead of 443? A: Yes, but you'll need to modify the Nginx configuration manually.

Q: Will this work with a subdomain? A: Yes, the script supports both root domains and subdomains.

Q: Can I run multiple OpenAlgo instances? A: Not with this script. Each installation assumes it's the only instance.

Q: How do I change my broker after installation? A: Edit /opt/openalgo/.env, update broker credentials, then run sudo docker compose restart.

Q: Is my broker data secure? A: Yes, all data is encrypted in transit (HTTPS/WSS) and stored locally on your server.

Q: Can I use this in production? A: Yes, this script is designed for production use with SSL, security headers, and proper firewall configuration.

Q: What if my domain doesn't have an A record yet? A: Wait for DNS propagation (usually 5-60 minutes) before running the script.

Changelog

Version 1.1.0 (October 19, 2024)

• Added support for running as root user (with warning)

• Fixed permission issues with docker-compose.yaml creation

• Improved error handling

• Enhanced management scripts

Version 1.0.0 (Initial Release)

• Complete automated installation

• SSL certificate automation

• Docker containerization

• Management helper scripts

License

OpenAlgo is released under the AGPL V3.0 License.

Contributing

Contributions are welcome! Please see our Contributing Guide.

---

Note: This script is designed for fresh server installations. If you have an existing OpenAlgo installation or other applications on the server, please review the script and make necessary adjustments to avoid conflicts.

For production deployments, we strongly recommend:

1. Using a non-root user

2. Setting up automated backups

3. Monitoring logs regularly

4. Keeping the system updated

5. Using Cloudflare or similar CDN/DDoS protection