Run the official Obsidian app in your browser.

docker run -d --name obsidian4web \
  --restart unless-stopped \
  -p 127.0.0.1:8080:8080 \
  -e O4W_SECRET="$(openssl rand -hex 32)" \
  -e O4W_TRUST_PROXY=1 \
  -e O4W_PROXY_MODE=allowlist \
  ghcr.io/d-513/obsidian4web:latest

services:
  obsidian4web:
    image: ghcr.io/d-513/obsidian4web:latest
    restart: unless-stopped
    ports:
      - "127.0.0.1:8080:8080"
    environment:
      O4W_SECRET: ${O4W_SECRET:?set O4W_SECRET to a long random string}
      O4W_TRUST_PROXY: "1"
      O4W_PROXY_MODE: allowlist
      # O4W_PROXY_ALLOW_HOSTS: ".openai.com,api.anthropic.com"
      # O4W_PROXY_WEBVIEWER: "1"

# deploy/Caddyfile — run container with O4W_TRUST_PROXY=1
notes.example.com, obsidian.example.org {
    encode zstd gzip
    reverse_proxy 127.0.0.1:8080 {
        header_up X-Forwarded-Host {host}
        header_up X-Forwarded-Proto {scheme}
    }
}

map $http_upgrade $connection_upgrade { default upgrade; '' close; }

server {
    listen 443 ssl http2;
    server_name notes.example.com;
    client_max_body_size 64m;
    proxy_read_timeout 3600s;

    location / {
        proxy_pass http://127.0.0.1:8080;
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_buffering off;
    }
}