IT Support » DMZ-WEB Infrastructure

# Snipe-IT

Containers `site-snipeit` (`docker.io/snipe/snipe-it`, Apache :80) +  

`db-snipeit` (`mariadb:11`) on `net-snipeit`. Data volume `app-snipeit-data`  

at **`/var/lib/snipeit`** (uploads, backups, OAuth keys) — app code is in the  

image. Secrets: `snipeit-db-root-password`, `snipeit-db-password`,  

`snipeit-app-key`.

Key env (behind NPM): `APP_URL=https://assets.mdsdefense.com`,  

`APP_FORCE_TLS=true`, `APP_TRUSTED_PROXIES=*`, `SECURE_COOKIES=true`,  

`DB_HOST=db-snipeit`, `APP_KEY` from secret. **`APP_KEY` must never change**  

— it encrypts fields in the DB; back the secret up with the DB.

```

# generate APP_KEY once (before first start)

podman run --rm docker.io/snipe/snipe-it:latest php artisan key:generate --show

printf '%s' 'base64:...' | podman secret create snipeit-app-key -

# first start runs migrations; watch it

podman logs -f site-snipeit

# artisan inside the container

podman exec -it site-snipeit php artisan about

podman exec -it site-snipeit php artisan snipeit:backup

podman exec -it site-snipeit php artisan config:clear   # after env changes + restart

# DB (same MariaDB recipe as WordPress)

podman exec -it db-snipeit sh -c 'mariadb -uroot -p"$MYSQL_ROOT_PASSWORD"'

podman exec db-snipeit sh -c 'mariadb-dump -uroot -p"$MYSQL_ROOT_PASSWORD" snipeit' > ~/tmp/snipeit-$(date +%F).sql

```

Upgrade: pin the image tag in the unit (`podman image inspect … --format '{{index .Labels "org.opencontainers.image.version"}}'`), dump the DB, change  

the tag, `daemon-reload`, restart — migrations run on start.

---

*Source: `dmz-web-podman-cheatsheet.md` v1.1.1 in the `dmz-web-deploy` repo ([Releases](#)). Edit the wiki and the repo copy together.*