Skip to main content

Initial owner setup

Only an unconfigured installation can create the first owner.

  1. Start the stack and verify readiness.
  2. Open http://localhost:3000.
  3. If setup is incomplete, Indexlume redirects to the setup screen.
  4. Enter the configured SETUP_TOKEN, owner email, and a strong password.
  5. Submit the form once.

Expected result: Indexlume creates the owner, workspace, and authenticated session, then locks the setup endpoint. A later attempt to bootstrap another owner is rejected.

After setup​

  • Remove the setup token from routine operator access and rotate it before keeping the configuration as a recovery record.
  • Create named accounts for other people; do not share the owner login.
  • Assign the least privileged role described in Workspaces and access.
  • Put TLS and a trusted reverse proxy in front of the dashboard and API before remote access.

If bootstrap fails, check API logs and confirm that the browser origin exactly matches APP_ORIGIN. Do not delete the database to retry unless this is a disposable new installation.