# App stacks

> Supabase, Ghost, Nextcloud, OpenClaw and Hermes Agent — what each installs, how to sign in and first steps.

App stacks are multi-container apps that ship with Zefily. Each runs as a Compose project under its site's own Linux user (rootless), keeps its data in named volumes, and only its web service is published to the web server, on `127.0.0.1`. Passwords and keys are generated into the site's `.env` (**Deploy → Edit .env** shows them).

The panel checks the server's memory before installing a stack. The first start downloads the images and can take several minutes.

## Supabase

**Needs 4 GB of memory.** The open-source Firebase alternative: PostgreSQL, authentication, storage, realtime, edge functions, the REST and GraphQL APIs and Supabase Studio.

- **Studio** (the dashboard) is at your domain, behind a login: **Show admin login** reveals the user and password.
- Your app connects to `https://your-domain` with the **anon key** (`ANON_KEY` in the `.env`); keep the `SERVICE_ROLE_KEY` on servers only.
- Sign-ups are confirmed without email until you set SMTP: add `SMTP_HOST`, `SMTP_PORT`, `SMTP_USER`, `SMTP_PASS` and `SMTP_ADMIN_EMAIL` in the `.env` and **Deploy now**.
- Versions are pinned to a tested set of Supabase services.

## Ghost

**Needs 1 GB of memory.** The publishing platform, with its MySQL database.

- There is no generated login: open `https://your-domain/ghost` **right after installing** and create the owner account — whoever does it first becomes the owner.
- **Email**: staff invitations, member sign-in links and password resets need an SMTP server. Open **Deploy → Edit .env**, set `MAIL_TRANSPORT=SMTP`, `SMTP_HOST`, `SMTP_PORT` (587, or 465 with `SMTP_SECURE=true`), `SMTP_USER`, `SMTP_PASS` and optionally `MAIL_FROM`, save, then **Deploy now**.
- Newsletters are sent through Mailgun, configured in Ghost Admin → Settings → Email newsletter.

## Nextcloud

**Needs 2 GB of memory.** Files, calendar, contacts and office collaboration, with MariaDB and Redis.

- Sign in with **Show admin login** (`admin` and the generated password).
- Install apps from Nextcloud's app store in its settings. Large uploads are limited by the site's PHP and web server settings in the container.
- Major version upgrades are done by Zefily after testing: Nextcloud cannot skip major versions.

## OpenClaw

**Needs 2 GB of memory.** An open-source AI agent gateway with its Control UI.

- Open your domain and enter the **gateway token**: it is the admin password shown by **Show admin login**.
- Add your model provider keys (OpenAI, Anthropic, …) and channels in the Control UI.
- Keep HTTPS on: OpenClaw only accepts its public origin over HTTPS.

## Hermes Agent + WebUI

**Needs 2 GB of memory.** Nous Research's Hermes Agent with Hermes WebUI.

- Open your domain and sign in to the WebUI with the password shown by **Show admin login**.
- Add your model provider keys in the WebUI. The agent's API is private between the two containers.
- The first start installs the WebUI's Python dependencies and takes a few minutes.

## Updating stacks

**Deploy now** on the site's **Deploy** pane restarts the stack with the images its version policy allows (see [Which version is installed?](/docs/one-click-apps)). When Zefily has tested a newer version of a stack, the pane shows **Update available**: deploy to move to it. Back up first: stack data lives in named volumes — back up the site's files and use each app's own export where it has one.

---
Source: https://zefily.com/docs/app-stacks