Skip to content

Quick Start

This guide walks you through deploying your first service on a fresh server.

Terminal window
curl -fsSL https://ryra.dev/install.sh | sh

Verify your environment is wired up correctly:

Terminal window
ryra doctor

It checks subuid/subgid for rootless Podman, loginctl linger, and any drift in installed services. Fixes are printed inline.

Let’s start with Vaultwarden, a Bitwarden-compatible password manager:

Terminal window
ryra add vaultwarden

Ryra will:

  • Install system dependencies (podman, etc.) if needed
  • Pull the container image
  • Generate systemd quadlet units
  • Start the service under your user via rootless Podman
Terminal window
ryra list # installed services
ryra list -l # also include data sizes and volumes
Terminal window
ryra config vaultwarden

ryra config <service> shows whether the service is installed, the URL it’s reachable at, and the commands you can run against it. For live container output, use journalctl --user -fu vaultwarden.service or systemctl --user status vaultwarden.service. The unit names are plain systemd, exactly what you’d expect.

Terminal window
ryra search

The SUPPORTS column tells you whether a service has native OIDC and/or SMTP integration.

Optional flags on ryra add:

  • --url https://... for a public URL (auto-HTTPS if Caddy is installed)
  • --auth for SSO (Authelia auto-installs)
  • --smtp=inbucket for a local test inbox; ryra config smtp for a real relay

ryra remove <service> to uninstall. Data is preserved; add --purge to wipe it too.