curl -s https://api.github.com/repos/loomio/loomio/releases/latest | python3 -c \
  "import json,sys;d=json.load(sys.stdin);print(d['tag_name'],d['published_at'],d['html_url'])"

v3.14.0 2026-11-01T02:08:42Z https://github.com/loomio/loomio/releases/tag/v3.14.0

docker compose images

CONTAINER           REPOSITORY          TAG                 IMAGE ID            SIZE
loomio-app          loomio/loomio       3.14.0              d2db5b238845        3.48GB
loomio-db           postgres            17                  3b0cda93be7c        640MB
loomio-redis        redis               8.4                 5d4cea9e22db        202MB
loomio-mailpit      axllent/mailpit     v1                  0790692be935        51.1MB

mkdir -p /opt/loomio && cd /opt/loomio
git clone --depth 1 https://github.com/loomio/loomio loomio-src
cp -r loomio-src/deploy ./ && cd deploy

abort "hostname must be a fully qualified domain name" if hostname.length > 253 || !hostname.include?(".")

# 关键密钥生成方式
openssl rand -hex 32   # SERVER_API_KEY / SECRET_COOKIE_TOKEN / RAILS_INBOUND_EMAIL_PASSWORD

# /opt/loomio/deploy/.env（内网无域名部署）
POSTGRES_CONTAINER_TAG=17
LOOMIO_CONTAINER_IMAGE=loomio/loomio
LOOMIO_CONTAINER_TAG=3.14.0

SITE_NAME=Loomio
CANONICAL_HOST=192.168.1.172
CANONICAL_PORT=8144
PUBLIC_APP_URL=http://192.168.1.172:8144
PRIVATE_APP_URL=http://app:3000
SUPPORT_EMAIL=admin@loomio.local
HOCUSPOCUS_URL=ws://192.168.1.172:8145
RAILS_INBOUND_EMAIL_URL=http://app:3000/rails/action_mailbox/relay/inbound_emails

SMTP_DOMAIN=mailpit
SMTP_SERVER=mailpit
SMTP_PORT=1025

WEB_CONCURRENCY=2
MIN_THREADS=3
MAX_THREADS=3
# FORCE_SSL=1          # 无 TLS 场景必须整行注释（设 0 无效）
USE_RACK_ATTACK=1
RACK_ATTACK_RATE_MULTPLIER=1
RACK_ATTACK_TIME_MULTPLIER=1

POSTGRES_PASSWORD=q1w2e3r4
POSTGRES_DB=loomio_production
DATABASE_URL=postgresql://postgres:q1w2e3r4@db/loomio_production
REDIS_CACHE_URL=redis://redis:6379/0
REDIS_MAXMEMORY=256mb
ACTIVE_STORAGE_SERVICE=local

LOOMIO_SYSTEM_RELOAD=1
LOOMIO_DISABLE_DEMO_GROUPS=1

SERVER_API_KEY=e1af7a533f349783e691a57bfef50c592af9994f9dbd2ba45b0a710c764fe034
SECRET_COOKIE_TOKEN=aed935f4d492c2014b1dead298b72e1b04675b55962c4424320a45a59f4f9a75
RAILS_INBOUND_EMAIL_PASSWORD=47600e7b9a55d8d9645b23f9e622c13ba3d762a2e1b5cba98a5649612dbdcf7f
RAILS_ENV=production

name: loomio

services:
  app:
    container_name: loomio-app
    image: ${LOOMIO_CONTAINER_IMAGE}:${LOOMIO_CONTAINER_TAG}
    restart: unless-stopped
    healthcheck:
      test: ['CMD-SHELL', 'curl --fail http://localhost:3000/ || exit 1']
    ports:
      - "8144:3000"
    env_file: ./.env
    volumes:
      - ./uploads:/loomio/public/system
      - ./storage:/loomio/storage
      - ./files:/loomio/public/files
      - ./plugins:/loomio/plugins/docker
      - ./import:/import
      - ./tmp:/loomio/tmp
      - client3:/loomio/public/client3
    networks:
      - main
    depends_on:
      db:
        condition: service_healthy
      redis:
        condition: service_healthy

  worker:
    container_name: loomio-worker
    image: ${LOOMIO_CONTAINER_IMAGE}:${LOOMIO_CONTAINER_TAG}
    restart: always
    networks:
      - main
    env_file: ./.env
    environment:
      - TASK=worker
    depends_on:
      app:
        condition: service_healthy
    volumes:
      - ./uploads:/loomio/public/system
      - ./storage:/loomio/storage
      - ./files:/loomio/public/files
      - ./plugins:/loomio/plugins/docker
      - ./tmp:/loomio/tmp

  db:
    container_name: loomio-db
    image: postgres:${POSTGRES_CONTAINER_TAG}
    restart: unless-stopped
    healthcheck:
      test: ['CMD', 'pg_isready', '-U', 'postgres']
    networks:
      - main
    env_file: ./.env
    volumes:
      - ./pgdata:/pgdata
    environment:
      - PGDATA=/pgdata

  redis:
    container_name: loomio-redis
    image: redis:8.4
    restart: unless-stopped
    command:
      - redis-server
      - --save
      - ""
      - --appendonly
      - "no"
      - --maxmemory
      - "${REDIS_MAXMEMORY:-256mb}"
      - --maxmemory-policy
      - allkeys-lru
    healthcheck:
      test: ['CMD', 'redis-cli', 'ping']
    networks:
      - main

  hocuspocus:
    container_name: loomio-hocuspocus
    image: ${LOOMIO_CONTAINER_IMAGE}:${LOOMIO_CONTAINER_TAG}
    restart: unless-stopped
    networks:
      - main
    env_file: ./.env
    ports:
      - "8145:80"
    environment:
      - TASK=hocuspocus

  mailpit:
    container_name: loomio-mailpit
    image: axllent/mailpit:v1
    restart: unless-stopped
    networks:
      - main
    ports:
      - "8146:8025"

volumes:
  client3:

networks:
  main:
    ipam:
      config:
        - subnet: 10.89.68.0/24

cd /opt/loomio/deploy
docker compose up -d

loomio-app          Up 8 minutes (healthy)    80/tcp, 0.0.0.0:8144->3000/tcp
loomio-db           Up 9 minutes (healthy)    5432/tcp
loomio-hocuspocus   Up 9 minutes              0.0.0.0:8145->80/tcp
loomio-mailpit      Up 26 minutes (healthy)   1025/tcp, 0.0.0.0:8146->8025/tcp
loomio-redis        Up 26 minutes (healthy)   6379/tcp
loomio-worker       Up 8 minutes              80/tcp

curl -s -o /dev/null -w '%{http_code} %{redirect_url}\n' http://192.168.1.172:8144/
curl -s http://192.168.1.172:8144/up
curl -s -o /dev/null -w '%{http_code}\n' http://192.168.1.172:8145/

302 http://192.168.1.172:8144/dashboard
ok
200

docker compose exec db psql -U postgres -d loomio_production -tAc \
  "select count(*) from information_schema.tables where table_schema='public'"

80

docker compose exec app bin/rails runner '
u = User.new(name: "admin", username: "admin_lmo", email: "admin@loomio.local")
u.password = "q1w2e3r4"
puts u.save
puts u.errors.full_messages.inspect'

false
["Password This password has previously appeared in a data breach and should never be used"]

docker compose exec app bin/rails runner '
u = User.new(name: "admin", username: "admin_lmo", email: "admin@loomio.local")
u.password = "q1w2e3r4!Loomio"
u.is_admin = true
u.email_verified = true
puts u.save!'

docker compose exec db psql -U postgres -d loomio_production -tAc \
  "select id,name,username,email,is_admin,email_verified from users"

1|Admin|admin_lmo|admin@loomio.local|t|t

curl -s -c lk.txt http://192.168.1.172:8144/dashboard -o /dev/null
TOK=$(grep csrftoken lk.txt | awk '{print $7}')
echo "cookie_len=${#TOK}"
curl -s -b lk.txt -H "Content-Type: application/json" -H "X-CSRF-Token: $TOK" \
  -X POST http://192.168.1.172:8144/api/v1/sessions \
  -d '{"user":{"email":"admin@loomio.local","password":"q1w2e3r4!Loomio"}}' | python3 -c \
  "import json,sys;d=json.load(sys.stdin);print('current_user_id=',d['current_user_id'],'user=',d['users'][0]['username'],'flash=',d['flash']['notice'])"

cookie_len=86
current_user_id= 1 user= admin_lmo flash= Signed in successfully

# 1) 建群组
curl -s -b lk.txt -H "Content-Type: application/json" -H "X-CSRF-Token: $TOK" \
  -X POST http://192.168.1.172:8144/api/v1/groups -d '{"group":{
    "name":"决策实验组","handle":"demo-group","group_privacy":"open",
    "membership_granted_upon":"request","description_format":"md"}}'

# 2) 发 proposal 投票（一次到位的正确载荷）
curl -s -b lk.txt -H "Content-Type: application/json" -H "X-CSRF-Token: $TOK" \
  -X POST http://192.168.1.172:8144/api/v1/polls -d '{"poll":{
    "group_id":1,"title":"是否采用弹性加班制度","details":"试行三个月后复盘",
    "details_format":"md","poll_type":"proposal",
    "options":["agree","abstain","disagree","block"],
    "closing_at":"2026-11-09T07:00:00Z"}}'

# 3) 投票（proposal 的 score 必须为 1）
curl -s -b lk.txt -H "Content-Type: application/json" -H "X-CSRF-Token: $TOK" \
  -X POST http://192.168.1.172:8144/api/v1/stances -d '{"stance":{
    "poll_id":1,"reason":"同意试行，建议先跑三个月","reason_format":"md",
    "stance_choices_attributes":[{"score":1,"poll_option_id":1}]}}'

docker compose exec db psql -U postgres -d loomio_production -tAc \
  "select id,key,title,poll_type,opened_at,closing_at from polls"
docker compose exec db psql -U postgres -d loomio_production -tAc \
  "select id,name from poll_options order by id"
docker compose exec db psql -U postgres -d loomio_production -tAc \
  "select id,poll_id,option_scores,reason,cast_at from stances"

1|9bvixmJ0|是否采用弹性加班制度|proposal|2026-11-02 07:08:09.41894|2026-11-09 07:00:00
1|Agree
2|Abstain
3|Disagree
4|Block
1|1|{"1": 1}|同意试行，建议先跑三个月|2026-11-02 07:08:18.4367

curl -s http://192.168.1.172:8146/api/v1/messages | head -c 120

{"total":0,"unread":0,"count":0,"messages_count":0,"messages_unread":0,"start":0,"tags":[],"messages":[]}

docker compose stop app worker hocuspocus
docker compose exec db psql -U postgres -c \
  "DROP DATABASE IF EXISTS loomio_production WITH (FORCE);" -c \
  "CREATE DATABASE loomio_production;"
docker compose up -d   # 入口 db:prepare 自动载 schema，80 表、0 用户

docker network create --subnet 10.89.68.0/24 loomio_main
docker volume create loomio_client3

docker run -d --name loomio-db --network loomio_main \
  -e POSTGRES_PASSWORD=q1w2e3r4 -e POSTGRES_DB=loomio_production -e PGDATA=/pgdata \
  -v /opt/loomio/deploy/pgdata:/pgdata postgres:17

docker run -d --name loomio-redis --network loomio_main \
  redis:8.4 redis-server --save "" --appendonly no --maxmemory 256mb --maxmemory-policy allkeys-lru

docker run -d --name loomio-app --network loomio_main --env-file /opt/loomio/deploy/.env \
  -p 8144:3000 \
  -v /opt/loomio/deploy/uploads:/loomio/public/system \
  -v /opt/loomio/deploy/storage:/loomio/storage \
  -v /opt/loomio/deploy/files:/loomio/public/files \
  -v /opt/loomio/deploy/plugins:/loomio/plugins/docker \
  -v /opt/loomio/deploy/import:/import \
  -v /opt/loomio/deploy/tmp:/loomio/tmp \
  -v loomio_client3:/loomio/public/client3 \
  loomio/loomio:3.14.0

docker run -d --name loomio-worker --network loomio_main --env-file /opt/loomio/deploy/.env \
  -e TASK=worker \
  -v /opt/loomio/deploy/uploads:/loomio/public/system \
  -v /opt/loomio/deploy/storage:/loomio/storage \
  -v /opt/loomio/deploy/files:/loomio/public/files \
  -v /opt/loomio/deploy/plugins:/loomio/plugins/docker \
  -v /opt/loomio/deploy/tmp:/loomio/tmp \
  loomio/loomio:3.14.0

docker run -d --name loomio-hocuspocus --network loomio_main --env-file /opt/loomio/deploy/.env \
  -e TASK=hocuspocus -p 8145:80 loomio/loomio:3.14.0

docker compose ps                    # 服务状态
docker compose logs -f app           # 应用日志
docker compose logs worker | grep -i recurring   # 定时任务流水
docker compose restart app           # 改 .env 后重启生效
docker compose exec app bin/jobs check           # 队列健康（见 D1 篇）
docker compose exec db pg_dump -U postgres loomio_production > backup_$(date +%F).sql
docker compose down                  # 停止（数据保留）；加 -v 才会删命名卷

#!/bin/bash
docker system prune -a -f && docker compose pull && docker compose down && \
docker compose run --rm app rake db:migrate && docker compose down && \
docker compose up -d --remove-orphans