# Admin App Coolify

> |

- **Type:** Skill
- **Install:** `agentstack add skill-evolv3ai-claude-skills-archive-admin-app-coolify`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [evolv3ai](https://agentstack.voostack.com/s/evolv3ai)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [evolv3ai](https://github.com/evolv3ai)
- **Source:** https://github.com/evolv3ai/claude-skills-archive/tree/main/archive/skills/admin-app-coolify
- **Website:** https://jezweb.com.au

## Install

```sh
agentstack add skill-evolv3ai-claude-skills-archive-admin-app-coolify
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Coolify - Self-Hosted PaaS

## CRITICAL MUST: Secrets and .env

- NEVER store live `.env` files or credentials inside any skill folder.
- `.env.template` files belong only in `templates/` within a skill.
- Store live secrets in `~/.admin/.env` (or another non-skill location you control) and reference them from there.

**Purpose**: Install and operate Coolify on a single server, then deploy apps via Nixpacks, Dockerfile, or Docker Compose.

## Step 0: Gather Required Information (MANDATORY)

**STOP. Before ANY installation commands, collect ALL parameters from the user.**

Copy this checklist and confirm each item:

```
Required Parameters:
- [ ] COOLIFY_SERVER_IP     - Target server IP address
- [ ] SSH_USER              - SSH username (default: ubuntu)
- [ ] SSH_KEY_PATH          - Path to SSH private key (default: ~/.ssh/id_rsa)
- [ ] COOLIFY_ROOT_USER_EMAIL    - Admin email address
- [ ] COOLIFY_ROOT_USER_PASSWORD - Admin password (see requirements below)
- [ ] COOLIFY_INSTANCE_DOMAIN    - Main Coolify URL (e.g., coolify.example.com)
- [ ] COOLIFY_WILDCARD_DOMAIN    - Base domain for apps (e.g., example.com)

Conditional Parameters (ask user):
- [ ] Using Cloudflare Tunnel for HTTPS? (Y/N)
      If Y: CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID
- [ ] Need OAuth callbacks or webhooks? (Y/N)
      If Y: Will configure origin certificates
- [ ] Additional SSH public keys to authorize? (optional)
```

### Password Requirements (Coolify enforced)

- Minimum 8 characters
- At least one uppercase letter (A-Z)
- At least one lowercase letter (a-z)
- At least one number (0-9)
- At least one symbol (!@#$%^&*)

**DO NOT proceed to Step 1 until ALL required parameters are confirmed.**

---

## Step 1: Determine Installation Path

Based on user answers, follow the appropriate workflow:

### Path A: Full Automation (Recommended)
**Use when**: New server, Cloudflare Tunnel for HTTPS, standard setup.

1. Read `references/ENHANCED_SETUP.md`
2. Export all parameters collected in Step 0
3. Run enhanced setup script

### Path B: Manual Installation
**Use when**: Existing server, custom requirements, or debugging.

1. Read `references/INSTALLATION.md`
2. Follow step-by-step SSH commands
3. Configure SSH keys for localhost management (critical step)

---

## Step 2: Secure HTTPS Access

**Determine access method based on Step 0 answers:**

| Scenario | Action |
|----------|--------|
| Cloudflare Tunnel = Yes | Read `references/cloudflare-tunnel.md` |
| OAuth/webhooks = Yes | Also read `references/cloudflare-origin-certificates.md` |
| Direct IP only (dev) | Skip tunnel, access via `http://SERVER_IP:8000` |

---

## Step 3: Verify Installation

Run this verification checklist:

```
Verification:
- [ ] Coolify UI accessible at configured domain or IP:8000
- [ ] Login with COOLIFY_ROOT_USER_EMAIL and password works
- [ ] Servers → localhost shows "Connected" (green)
- [ ] If tunnel: HTTPS working at COOLIFY_INSTANCE_DOMAIN
```

**If localhost not connected**: The SSH key configuration failed. See `references/INSTALLATION.md` section "Configure Coolify SSH Access".

---

## Navigation

Detailed references (one level deep):
- Manual SSH installation: `references/INSTALLATION.md`
- Fully automated setup: `references/ENHANCED_SETUP.md`
- Bundled scripts: `references/BUNDLED_SCRIPTS.md`
- Cloudflare Tunnel (wildcard): `references/cloudflare-tunnel.md`
- Origin certificates (OAuth/webhooks): `references/cloudflare-origin-certificates.md`
- Error 1033 troubleshooting: `references/TROUBLESHOOTING_CF1033.md`

## Critical Rules

- Always install Docker CE with Compose plugin before Coolify.
- Do not expose port 8000 publicly without HTTPS (tunnel or reverse proxy).
- Keep `/data/coolify` intact; treat it as state.
- Always configure Coolify's SSH key for localhost management.

## Logging Integration

Log major operations using centralized logging from `admin`:

```bash
log_admin "SUCCESS" "installation" "Installed Coolify" "version=4.x server=$SERVER_ID"
log_admin "SUCCESS" "system-change" "Configured Coolify" "domain=$DOMAIN"
log_admin "SUCCESS" "operation" "Deployed app via Coolify" "app=$APP_NAME"
```

## Related Skills

- `admin-devops` for inventory and provisioning.
- `admin-infra-*` for provider-specific VM setup.
- `admin-wsl` for local Docker/CLI support when coordinating from WSL.

## References

- Coolify docs: https://coolify.io/docs
- Coolify GitHub: https://github.com/coollabsio/coolify

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [evolv3ai](https://github.com/evolv3ai)
- **Source:** [evolv3ai/claude-skills-archive](https://github.com/evolv3ai/claude-skills-archive)
- **License:** MIT
- **Homepage:** https://jezweb.com.au

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-evolv3ai-claude-skills-archive-admin-app-coolify
- Seller: https://agentstack.voostack.com/s/evolv3ai
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.