Install on Windows

#Install Docker Desktop

1. Enable virtualisation in the BIOS/UEFI if it is not already on.

2. Open PowerShell as Administrator and install WSL 2:

   wsl --install
   

   Restart when asked.

3. Download and install Docker Desktop and keep Use WSL 2 based engine selected.

4. In Docker Desktop › Settings › General, enable Start Docker Desktop when you sign in.

5. Check it in a new PowerShell window:

   docker compose version
   

#Free ports 80 and 443

Caddy needs ports 80 and 443 for HTTPS. On Windows they are often taken by IIS or another web server. Check:

Get-NetTCPConnection -LocalPort 80,443 -State Listen -ErrorAction SilentlyContinue |
  Select-Object LocalPort, OwningProcess, @{n="Process";e={(Get-Process -Id $_.OwningProcess).Name}}

No output means they are free. If IIS uses them, install InfraMole on another machine, or stop the IIS site bindings on 80/443.

#Open the firewall

In PowerShell as Administrator:

New-NetFirewallRule -DisplayName "InfraMole HTTP"  -Direction Inbound -Protocol TCP -LocalPort 80  -Action Allow
New-NetFirewallRule -DisplayName "InfraMole HTTPS" -Direction Inbound -Protocol TCP -LocalPort 443 -Action Allow

Your router or cloud firewall must also forward 80/443 to this machine, and your DNS name must point at its public address.

#Download InfraMole

New-Item -ItemType Directory -Force C:\InfraMole | Out-Null
Set-Location C:\InfraMole
$base = "https://github.com/InfraMole/self-hosted/releases/latest/download"
Invoke-WebRequest "$base/inframole-self-hosted.tar.gz" -OutFile inframole-self-hosted.tar.gz
Invoke-WebRequest "$base/inframole-self-hosted.tar.gz.sha256" -OutFile inframole-self-hosted.tar.gz.sha256
$expected = (Get-Content .\inframole-self-hosted.tar.gz.sha256).Split(" ")[0]
if ((Get-FileHash .\inframole-self-hosted.tar.gz -Algorithm SHA256).Hash -ne $expected) { throw "Checksum mismatch: do not use this file." }
tar -xzf inframole-self-hosted.tar.gz --strip-components=1

tar is built into Windows 10 and 11. The folder now contains docker-compose.yml, Caddyfile, .env.example and scripts\.

#Configure

Copy-Item .env.example .env
powershell -ExecutionPolicy Bypass -File .\scripts\gen-secrets.ps1 .env
notepad .env

gen-secrets.ps1 fills every empty password and key. In Notepad set at least DEPMAP_DOMAIN (your DNS name, without https://) and save. Email (SMTP_URL, MAIL_FROM) and encrypted backups (BACKUP_AGE_RECIPIENT) are recommended — see Configuration.

#Start

docker compose up -d
docker compose ps

The first start downloads the images, applies the database migrations and requests the certificate. After about a minute every service should be running (web: healthy).

#Check it works

Invoke-RestMethod https://inframole.example.com/api/health

The answer shows status: ok. Then open https://<your domain>/sign-up, create the first account and your workspace.