Self-hosted OpenObserve Docker Deployment with Infisical for high-performance log, trace, and metric observability
Securely run OpenObserve Enterprise in Docker using Infisical for managing sensitive credentials (email and password).
Features
Run OpenObserve Enterprise in a container
Persistent data storage with Docker volumes
Secrets (email & password) managed securely via Infisical
No .env file required
Easy to start and restart with Docker Compose
Prerequisites
Docker & Docker Compose installed
Infisical CLI installed:
npm install -g @infisical/cli
Infisical account with a project containing the secrets:
Secret Name Description EMAIL OpenObserve root user email PASSWORD OpenObserve root user password
Running OpenObserve with Infisical
Start the container with secrets injected directly:
infisical run --project openobserve-project --environment prod -- docker-compose up -d
Replace openobserve-project with your Infisical project name.
Replace prod with your Infisical environment.
Infisical injects EMAIL and PASSWORD at runtime.
Access OpenObserve
Open your browser at:
Log in using the credentials stored in Infisical.
Data Persistence All OpenObserve data is stored in the local ./data folder. ZO_DATA_DIR points to this folder inside the container. Data persists across container restarts. Stopping the Container docker-compose down Notes Secrets are never written to disk; they are injected only at runtime. To update credentials, simply update them in Infisical and restart the container using infisical run.