Docker Deployment

Human can run in Docker for isolated, reproducible deployments. The official Dockerfile produces a minimal image with the gateway as the default command.

Quick start

docker run -it --rm \
  -v ~/.human:/human-data/.human \
  -p 3000:3000 \
  ghcr.io/sethdford/h-uman:latest \
  gateway

Mount your config directory so the container uses your existing config and data.

Docker Compose

version: "3.8"
services:
  human:
    image: ghcr.io/sethdford/h-uman:latest
    ports:
      - "3000:3000"
    volumes:
      - ./config:/human-data/.human
      - ./workspace:/human-data/workspace
    environment:
      - HOME=/human-data
      - HUMAN_WORKSPACE=/human-data/workspace
      - HUMAN_GATEWAY_PORT=3000
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
    restart: unless-stopped

Building from source

The Dockerfile uses a multi-stage build:

# Stage 1: Build
FROM alpine:3.23 AS builder
RUN apk add --no-cache build-base cmake sqlite-dev curl-dev
WORKDIR /app
COPY CMakeLists.txt src/ include/ asm/ vendor/ cmake/ ./
RUN mkdir build && cd build && \
    cmake .. -DCMAKE_BUILD_TYPE=MinSizeRel -DHU_ENABLE_LTO=ON -DHU_ENABLE_CURL=ON && \
    make -j$(nproc)

# Stage 2: Runtime
FROM alpine:3.23 AS release-base
RUN apk add --no-cache ca-certificates curl tzdata libsqlite3
COPY --from=builder /app/build/human /usr/local/bin/human
ENV HUMAN_WORKSPACE=/human-data/workspace
ENV HOME=/human-data
ENV HUMAN_GATEWAY_PORT=3000
WORKDIR /human-data
EXPOSE 3000
ENTRYPOINT ["human"]
CMD ["gateway", "--port", "3000", "--host", "::"]

Build:

docker build -t human:local .

Environment variables

| Variable | Description | Default | | --------------------------- | --------------------------------- | ----------------------- | | HOME | Home directory (config path base) | /human-data | | HUMAN_WORKSPACE | Workspace directory | /human-data/workspace | | HUMAN_GATEWAY_PORT | Gateway port | 3000 | | HUMAN_WEBHOOK_HMAC_SECRET | Webhook HMAC secret (optional) | - | | OPENAI_API_KEY | OpenAI API key (if using) | - | | ANTHROPIC_API_KEY | Anthropic API key (if using) | - |

API keys and secrets can be passed via environment variables or a mounted config file.

Image variants

• release-base (default): Non-root user (65534:65534), safe for production
• release-root: Runs as root; use only when necessary (e.g. privileged operations)

Build root image:

docker build --target release-root -t human:root .

Volumes

| Mount | Purpose | | ----------------------- | ---------------------------------- | | /human-data/.human | Config, crontab, skills, memory DB | | /human-data/workspace | Agent workspace files |

Ensure these directories exist and have correct permissions for the container user.