seems to be no place to enter the password

[davidelectricfree]

What is your set up?

self Hosted

Version

3.7.3

Describe the issue

There seems to be no place to enter the password. seems a bug?

Reproduction steps

1. use docker to depoly the APP
2. config the .env file

...

my docker compose file

version: '3.3'

services:
  leantime_db:
    image: mysql:8.4
    container_name: leantime_db
    volumes:
      - db_data:/var/lib/mysql
    restart: unless-stopped
    env_file: ./.env                                        # Environment file with settings
    networks:
      - leantime-net
    command: --character-set-server=UTF8MB4 --collation-server=UTF8MB4_unicode_ci
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 30s
      timeout: 10s
      retries: 3

  leantime:
    image: leantime/leantime:${LEAN_VERSION:-latest}
    container_name: leantime
    restart: unless-stopped
    env_file: ./.env                                        # Environment file with settings
    # Add security options
    security_opt:
      - no-new-privileges:true
    # Add capabilities
    cap_add:
      # - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
      - CAP_SETGID
      - CAP_SETUID
    ports:
      - "${LEAN_PORT:-8080}:8080"
    networks:
      - leantime-net
    volumes:
      - public_userfiles:/var/www/html/public/userfiles     # Volume to store public files, logo etc
      - userfiles:/var/www/html/userfiles                   # Original volume name for compatibility
      - plugins:/var/www/html/app/Plugins                   # Plugin storage
      - ./logs:/var/www/html/storage/logs                     # Log storage
    depends_on:
      leantime_db:
        condition: service_healthy

  # Add a helper container for volume permissions
  # Run via docker compose --profile mysql_helper up -d
  mysql_helper:
    image: mysql:8.4
    command: chown -R mysql:mysql /var/lib/mysql
    volumes:
      - db_data:/var/lib/mysql
    user: root
    profiles: [ "helper" ]

volumes:
  db_data:
  userfiles:                                               # New volume for public files
  public_userfiles:
  plugins:
  #logs:

networks:
  leantime-net:

Error Logs (LEANTIMEFOLDER/storage/logs)

No response

[davidelectricfree]

leantime-2026-04-08.log

my log file is here

[davidelectricfree]

# This is a sample configuration file with all possible configuration options.
# If you don't want to maintain a file like this you can pass in all variables via Server Variables

## Minimum Configuration, these are required for installation
PUID=1000
PGID=1000

LEAN_PORT = '8020'                                 # The port to expose and access Leantime
LEAN_APP_URL = 'http://192.168.1.249:8020'                                  # Base URL, needed for subfolder or proxy installs (including http:// or https://)
LEAN_APP_DIR = '/leantime'                                  # Base of application without trailing slash (used for cookies), e.g, /leantime

LEAN_DEBUG = 1                                     # Debug flag

# Database - MySQL container
MYSQL_ROOT_PASSWORD = 'changeme123'                # MySQL root password
MYSQL_DATABASE = 'leantime'                        # Database name
MYSQL_USER = 'lean'                                # Database username
MYSQL_PASSWORD = 'changeme123'                     # Database password

# Database - leantime container
LEAN_DB_HOST = 'mysql_leantime'                    # Database host
LEAN_DB_USER = 'lean'                              # Database username (needs to be the same as MYSQL_USER)
LEAN_DB_PASSWORD = 'changeme123'                   # Database password (needs to be the same as MYSQL_PASSWORD)
LEAN_DB_DATABASE = 'leantime'                      # Database name (needs to be the same as MYSQL_DATABASE)
LEAN_DB_PORT = '3306'                              # Database port

## Session Management
LEAN_SESSION_PASSWORD = '3evBlq9zdUEuzKvVJHWWx3QzsQhturBApxwcws2m'  # Salting sessions, replace with a strong password
LEAN_SESSION_EXPIRATION = 28800                    # How many seconds after inactivity should we logout?  28800seconds = 8hours
LEAN_SESSION_SECURE = false                        # Serve cookies via https only? Set to true when using https, set to false when using http. 


## Optional Configuration, you may omit these from your .env file

## Default Settings
LEAN_SITENAME = 'Leantime'                         # Name of your site, can be changed later
LEAN_LANGUAGE = 'zh-CH'                            # Default language
LEAN_DEFAULT_TIMEZONE = 'Asia/Shanghai'      # Set default timezone
LEAN_LOG_PATH = ''                                 # Default Log Path (including filename), if not set /logs/error.log will be used
LEAN_DISABLE_LOGIN_FORM = false                    # If true then don't show the login form (useful only if additional auth method[s] are available)

## Look & Feel, these settings are available in the UI and can be overwritten there.
LEAN_LOGO_PATH = '/dist/images/logo.svg'           # Default logo path, can be changed later
LEAN_PRINT_LOGO_URL = '/dist/images/logo.png'      # Default logo URL use for printing (must be jpg or png format)
LEAN_DEFAULT_THEME = 'default'                     # Default theme
LEAN_PRIMARY_COLOR = '#006d9f'                     # Primary Theme color
LEAN_SECONDARY_COLOR =' #00a886'                   # Secondary Theme Color


## Fileuploads

# Local File Uploads
LEAN_USER_FILE_PATH = 'userfiles/'                 # Local relative path to store uploaded files (if not using S3)
LEAN_DB_BACKUP_PATH = 'backupdb/'                  # Local relative path to store backup files, need permission to write

# S3 File Uploads
LEAN_USE_S3 = false                                # Set to true if you want to use S3 instead of local files
LEAN_S3_KEY = ''                                   # S3 Key
LEAN_S3_SECRET = ''                                # S3 Secret
LEAN_S3_BUCKET = ''                                # Your S3 bucket
LEAN_S3_USE_PATH_STYLE_ENDPOINT = false            # Sets the endpoint style: false => https://[bucket].[endpoint] ; true => https://[endpoint]/[bucket]
LEAN_S3_REGION = ''                                # S3 region
LEAN_S3_FOLDER_NAME = ''                           # Foldername within S3 (can be empty)
LEAN_S3_END_POINT = null                           # S3 EndPoint S3 Compatible (https://sfo2.digitaloceanspaces.com)

## Email
LEAN_EMAIL_RETURN = 'xxx@126.com'                             # Return email address, needs to be valid email address format
LEAN_EMAIL_USE_SMTP = true                        # Use SMTP? If set to false, the default php mail() function will be used
LEAN_EMAIL_SMTP_HOSTS = 'xxx.126.com'                         # SMTP host
LEAN_EMAIL_SMTP_AUTH = true                        # SMTP authentication required
LEAN_EMAIL_SMTP_USERNAME = 'xxx@126.com'                      # SMTP username
LEAN_EMAIL_SMTP_PASSWORD = 'xxx'                      # SMTP password
LEAN_EMAIL_SMTP_AUTO_TLS = true                    # SMTP Enable TLS encryption automatically if a server supports it
LEAN_EMAIL_SMTP_SECURE = 'TLS'                        # SMTP Security protocol (usually one of: TLS, SSL, STARTTLS)
LEAN_EMAIL_SMTP_SSLNOVERIFY = true                # SMTP Allow insecure SSL: Don't verify certificate, accept self-signed, etc.
LEAN_EMAIL_SMTP_PORT = '465'                          # Port (usually one of 25, 465, 587, 2526)

## LDAP
LEAN_LDAP_USE_LDAP = false                         # Set to true if you want to use LDAP
LEAN_LDAP_LDAP_DOMAIN = 'xxx.com'                         # Domain name after username@ so users can login without domain definition
LEAN_LDAP_LDAP_TYPE = 'AD'                         # Select the correct directory type. Currently Supported: OL - OpenLdap, AD - Active Directory
LEAN_LDAP_HOST = 'xxx.com'                                # FQDN
LEAN_LDAP_PORT = 389                               # Default Port
LEAN_LDAP_URI = 'ldap://xxx.com:389'                                 # LDAP URI as alternative to hostname and port. Uses ldap://hostname:port
LEAN_LDAP_DN = 'xxx'                                  # Location of users, example: CN=users,DC=example,DC=com
                                                   # Leantime->Ldap attribute mapping
#LEAN_LDAP_KEYS="{
#        \"username\":\"uid\",
#        \"groups\":\"memberOf\",
#        \"email\":\"mail\",
#        \"firstname\":\"displayname\",
#        \"lastname\":\"\",
#        \"phone\":\"telephoneNumber\",
#        \"jobTitle\":\"title\"
#        \"jobLevel\":\"level\"
#        \"department\":\"department\"
#
#}"

# For AD use these default attributes
 LEAN_LDAP_KEYS="{
        \"username\":\"cn\",
        \"groups\":\"memberOf\",
        \"email\":\"mail\",
        \"firstname\":\"givenName\",
        \"lastname\":\"sn\",
        \"phone\":\"telephoneNumber\",
        \"jobTitle\":\"title\"
        \"jobLevel\":\"level\"
        \"department\":\"department\"
      }"

LEAN_LDAP_DEFAULT_ROLE_KEY = 20;                   # Default Leantime Role on creation. (set to editor)

# Default role assignments upon first login.
# optional - Can be updated later in user settings for each user
LEAN_LDAP_GROUP_ASSIGNMENT="{
               \"5\": {
                 \"ltRole\":\"readonly\",
                 \"ldapRole\":\"readonly\"
               },
               \"10\": {
                 \"ltRole\":\"commenter\",
                  \"ldapRole\":\"commenter\"
               },
               \"20\": {
                 \"ltRole\":\"editor\",
                  \"ldapRole\":\"editor\"
               },
               \"30\": {
                 \"ltRole\":\"manager\",
                  \"ldapRole\":\"manager\"
               },
               \"40\": {
                 \"ltRole\":\"admin\",
                  \"ldapRole\":\"administrators\"
               },
               \"50\": {
                 \"ltRole\":\"owner\",
                 \"ldapRole\":\"administrators\"
               }
}"

## OpenID Connect
# required
LEAN_OIDC_ENABLE = false
LEAN_OIDC_CLIENT_ID =
LEAN_OIDC_CLIENT_SECRET =

# required - the URL for your provider (examples down below)
#LEAN_OIDC_PROVIDER_URL =

#Create User if it doesn't exist in Leantime db, otherwise fail login
LEAN_OIDC_CREATE_USER = false

# Default role for users created via OIDC (20 is editor)
LEAN_OIDC_DEFAULT_ROLE = 20

# optional - these will be read from the well-known configuration if possible
#LEAN_OIDC_AUTH_URL_OVERRIDE =
#LEAN_OIDC_TOKEN_URL_OVERRIDE =
#LEAN_OIDC_JWKS_URL_OVERRIDE =
#LEAN_OIDC_USERINFO_URL_OVERRIDE =

# optional - override the public key for RSA validation
#LEAN_OIDC_CERTIFICATE_STRING =
#LEAN_OIDC_CERTIFICATE_FILE =

# optional - override the requested scopes
#LEAN_OIDC_SCOPES =

# optional - override the keys used for these fields
#LEAN_OIDC_FIELD_EMAIL =
#LEAN_OIDC_FIELD_FIRSTNAME =
#LEAN_OIDC_FIELD_LASTNAME =
#LEAN_OIDC_FIELD_PHONE =
#LEAN_OIDC_FIELD_JOBTITLE =
#LEAN_OIDC_FIELD_JOBLEVEL=
#LEAN_OIDC_FIELD_DEPARTMENT =

## OpenID Connect setting for GitHub
#LEAN_OIDC_PROVIDER_URL = https://token.actions.githubusercontent.com/
#LEAN_OIDC_AUTH_URL_OVERRIDE = https://github.com/login/oauth/authorize
#LEAN_OIDC_TOKEN_URL_OVERRIDE = https://github.com/login/oauth/access_token
#LEAN_OIDC_USERINFO_URL_OVERRIDE = https://api.github.com/user,https://api.github.com/user/emails
#LEAN_OIDC_SCOPES = user:email,read:user
#LEAN_OIDC_FIELD_EMAIL = 0.email
#LEAN_OIDC_FIELD_FIRSTNAME = name


## Redis (for session storage and cache)
LEAN_USE_REDIS = false                             # Set to true to use redis as session cache
LEAN_REDIS_URL = ''                                # Add URL path such as tcp://1.2.3.4:6379. If you are using a password, add ?auth=yourverycomplexpasswordhere to your URL
LEAN_REDIS_HOST = ''
LEAN_REDIS_PORT = 6379
LEAN_REDIS_PASSWORD = ''
LEAN_REDIS_SCHEME = ''

## Rate limiting
LEAN_RATELIMIT_GENERAL = 1000
LEAN_RATELIMIT_API = 10
LEAN_RATELIMIT_AUTH = 20

[marcelfolaron]

Triage note (automated)

Looking at your .env and docker-compose.yml, the issue is a configuration mismatch, not a code bug:

1. DB host mismatch: Your .env sets LEAN_DB_HOST = 'mysql_leantime', but your Docker Compose service is named leantime_db. The Leantime container can't resolve mysql_leantime because no service with that name exists. Change it to LEAN_DB_HOST = 'leantime_db'.

2. Password field not showing: The screenshot shows the install/setup page — the password field should appear after the database connection succeeds. Because the DB connection is failing silently, the setup can't proceed. Fixing the DB host should resolve this.

3. Your error log (from the attached file) will likely show a database connection error. Could you confirm?

Action: Update your .env to use LEAN_DB_HOST = 'leantime_db' (matching the service name in your compose file), restart the containers, and try again. If the password field still doesn't appear after that fix, please share the updated error log.

[davidelectricfree]

Triage note (automated)

Looking at your and , the issue is a configuration mismatch, not a code bug:.env``docker-compose.yml

1. DB host mismatch: Your sets , but your Docker Compose service is named . The Leantime container can't resolve because no service with that name exists. Change it to ..env``LEAN_DB_HOST = 'mysql_leantime'``leantime_db``mysql_leantime``LEAN_DB_HOST = 'leantime_db'
2. Password field not showing: The screenshot shows the install/setup page — the password field should appear after the database connection succeeds. Because the DB connection is failing silently, the setup can't proceed. Fixing the DB host should resolve this.
3. Your error log (from the attached file) will likely show a database connection error. Could you confirm?

Action: Update your to use (matching the service name in your compose file), restart the containers, and try again. If the password field still doesn't appear after that fix, please share the updated error log..env``LEAN_DB_HOST = 'leantime_db'

many thx, seems the password field still doesn't appear

# This is a sample configuration file with all possible configuration options.
# If you don't want to maintain a file like this you can pass in all variables via Server Variables

## Minimum Configuration, these are required for installation
PUID=1000
PGID=1000

LEAN_PORT = '8020'                                 # The port to expose and access Leantime
LEAN_APP_URL = 'http://192.168.1.249:8020'                                  # Base URL, needed for subfolder or proxy installs (including http:// or https://)
LEAN_APP_DIR = '/leantime'                                  # Base of application without trailing slash (used for cookies), e.g, /leantime

LEAN_DEBUG = 1                                     # Debug flag

# Database - MySQL container
MYSQL_ROOT_PASSWORD = 'changeme123'                # MySQL root password
MYSQL_DATABASE = 'leantime'                        # Database name
MYSQL_USER = 'lean'                                # Database username
MYSQL_PASSWORD = 'changeme123'                     # Database password

# Database - leantime container
LEAN_DB_HOST = 'leantime_db'                    # Database host
LEAN_DB_USER = 'lean'                              # Database username (needs to be the same as MYSQL_USER)
LEAN_DB_PASSWORD = 'changeme123'                   # Database password (needs to be the same as MYSQL_PASSWORD)
LEAN_DB_DATABASE = 'leantime'                      # Database name (needs to be the same as MYSQL_DATABASE)
LEAN_DB_PORT = '3306'                              # Database port

## Session Management
LEAN_SESSION_PASSWORD = '3evBlq9zdUEuzKvVJHWWx3QzsQhturBApxwcws2m'  # Salting sessions, replace with a strong password
LEAN_SESSION_EXPIRATION = 28800                    # How many seconds after inactivity should we logout?  28800seconds = 8hours
LEAN_SESSION_SECURE = false                        # Serve cookies via https only? Set to true when using https, set to false when using http. 


## Optional Configuration, you may omit these from your .env file

## Default Settings
LEAN_SITENAME = 'Leantime'                         # Name of your site, can be changed later
LEAN_LANGUAGE = 'zh-CH'                            # Default language
LEAN_DEFAULT_TIMEZONE = 'Asia/Shanghai'      # Set default timezone
LEAN_LOG_PATH = ''                                 # Default Log Path (including filename), if not set /logs/error.log will be used
LEAN_DISABLE_LOGIN_FORM = false                    # If true then don't show the login form (useful only if additional auth method[s] are available)

## Look & Feel, these settings are available in the UI and can be overwritten there.
LEAN_LOGO_PATH = '/dist/images/logo.svg'           # Default logo path, can be changed later
LEAN_PRINT_LOGO_URL = '/dist/images/logo.png'      # Default logo URL use for printing (must be jpg or png format)
LEAN_DEFAULT_THEME = 'default'                     # Default theme
LEAN_PRIMARY_COLOR = '#006d9f'                     # Primary Theme color
LEAN_SECONDARY_COLOR =' #00a886'                   # Secondary Theme Color


## Fileuploads

# Local File Uploads
LEAN_USER_FILE_PATH = 'userfiles/'                 # Local relative path to store uploaded files (if not using S3)
LEAN_DB_BACKUP_PATH = 'backupdb/'                  # Local relative path to store backup files, need permission to write

# S3 File Uploads
LEAN_USE_S3 = false                                # Set to true if you want to use S3 instead of local files
LEAN_S3_KEY = ''                                   # S3 Key
LEAN_S3_SECRET = ''                                # S3 Secret
LEAN_S3_BUCKET = ''                                # Your S3 bucket
LEAN_S3_USE_PATH_STYLE_ENDPOINT = false            # Sets the endpoint style: false => https://[bucket].[endpoint] ; true => https://[endpoint]/[bucket]
LEAN_S3_REGION = ''                                # S3 region
LEAN_S3_FOLDER_NAME = ''                           # Foldername within S3 (can be empty)
LEAN_S3_END_POINT = null                           # S3 EndPoint S3 Compatible (https://sfo2.digitaloceanspaces.com)

## Email
LEAN_EMAIL_RETURN = 'jjjkkk530@126.com'                             # Return email address, needs to be valid email address format
LEAN_EMAIL_USE_SMTP = true                        # Use SMTP? If set to false, the default php mail() function will be used
LEAN_EMAIL_SMTP_HOSTS = 'smtp.126.com'                         # SMTP host
LEAN_EMAIL_SMTP_AUTH = true                        # SMTP authentication required
LEAN_EMAIL_SMTP_USERNAME = 'xx@126.com'                      # SMTP username
LEAN_EMAIL_SMTP_PASSWORD = 'xx'                      # SMTP password
LEAN_EMAIL_SMTP_AUTO_TLS = true                    # SMTP Enable TLS encryption automatically if a server supports it
LEAN_EMAIL_SMTP_SECURE = 'TLS'                        # SMTP Security protocol (usually one of: TLS, SSL, STARTTLS)
LEAN_EMAIL_SMTP_SSLNOVERIFY = true                # SMTP Allow insecure SSL: Don't verify certificate, accept self-signed, etc.
LEAN_EMAIL_SMTP_PORT = '465'                          # Port (usually one of 25, 465, 587, 2526)

## LDAP
LEAN_LDAP_USE_LDAP = false                         # Set to true if you want to use LDAP
LEAN_LDAP_LDAP_DOMAIN = 'zhiqianghu.com'                         # Domain name after username@ so users can login without domain definition
LEAN_LDAP_LDAP_TYPE = 'AD'                         # Select the correct directory type. Currently Supported: OL - OpenLdap, AD - Active Directory
LEAN_LDAP_HOST = 'zhiqianghu.com'                                # FQDN
LEAN_LDAP_PORT = 389                               # Default Port
LEAN_LDAP_URI = 'ldap://zhiqianghu.com:389'                                 # LDAP URI as alternative to hostname and port. Uses ldap://hostname:port
LEAN_LDAP_DN = 'uid=root,cn=users,dc=zhiqianghu,dc=com'                                  # Location of users, example: CN=users,DC=example,DC=com
                                                   # Leantime->Ldap attribute mapping
#LEAN_LDAP_KEYS="{
#        \"username\":\"uid\",
#        \"groups\":\"memberOf\",
#        \"email\":\"mail\",
#        \"firstname\":\"displayname\",
#        \"lastname\":\"\",
#        \"phone\":\"telephoneNumber\",
#        \"jobTitle\":\"title\"
#        \"jobLevel\":\"level\"
#        \"department\":\"department\"
#
#}"

# For AD use these default attributes
 LEAN_LDAP_KEYS="{
        \"username\":\"cn\",
        \"groups\":\"memberOf\",
        \"email\":\"mail\",
        \"firstname\":\"givenName\",
        \"lastname\":\"sn\",
        \"phone\":\"telephoneNumber\",
        \"jobTitle\":\"title\"
        \"jobLevel\":\"level\"
        \"department\":\"department\"
      }"

LEAN_LDAP_DEFAULT_ROLE_KEY = 20;                   # Default Leantime Role on creation. (set to editor)

# Default role assignments upon first login.
# optional - Can be updated later in user settings for each user
LEAN_LDAP_GROUP_ASSIGNMENT="{
               \"5\": {
                 \"ltRole\":\"readonly\",
                 \"ldapRole\":\"readonly\"
               },
               \"10\": {
                 \"ltRole\":\"commenter\",
                  \"ldapRole\":\"commenter\"
               },
               \"20\": {
                 \"ltRole\":\"editor\",
                  \"ldapRole\":\"editor\"
               },
               \"30\": {
                 \"ltRole\":\"manager\",
                  \"ldapRole\":\"manager\"
               },
               \"40\": {
                 \"ltRole\":\"admin\",
                  \"ldapRole\":\"administrators\"
               },
               \"50\": {
                 \"ltRole\":\"owner\",
                 \"ldapRole\":\"administrators\"
               }
}"

## OpenID Connect
# required
LEAN_OIDC_ENABLE = false
LEAN_OIDC_CLIENT_ID =
LEAN_OIDC_CLIENT_SECRET =

# required - the URL for your provider (examples down below)
#LEAN_OIDC_PROVIDER_URL =

#Create User if it doesn't exist in Leantime db, otherwise fail login
LEAN_OIDC_CREATE_USER = false

# Default role for users created via OIDC (20 is editor)
LEAN_OIDC_DEFAULT_ROLE = 20

# optional - these will be read from the well-known configuration if possible
#LEAN_OIDC_AUTH_URL_OVERRIDE =
#LEAN_OIDC_TOKEN_URL_OVERRIDE =
#LEAN_OIDC_JWKS_URL_OVERRIDE =
#LEAN_OIDC_USERINFO_URL_OVERRIDE =

# optional - override the public key for RSA validation
#LEAN_OIDC_CERTIFICATE_STRING =
#LEAN_OIDC_CERTIFICATE_FILE =

# optional - override the requested scopes
#LEAN_OIDC_SCOPES =

# optional - override the keys used for these fields
#LEAN_OIDC_FIELD_EMAIL =
#LEAN_OIDC_FIELD_FIRSTNAME =
#LEAN_OIDC_FIELD_LASTNAME =
#LEAN_OIDC_FIELD_PHONE =
#LEAN_OIDC_FIELD_JOBTITLE =
#LEAN_OIDC_FIELD_JOBLEVEL=
#LEAN_OIDC_FIELD_DEPARTMENT =

## OpenID Connect setting for GitHub
#LEAN_OIDC_PROVIDER_URL = https://token.actions.githubusercontent.com/
#LEAN_OIDC_AUTH_URL_OVERRIDE = https://github.com/login/oauth/authorize
#LEAN_OIDC_TOKEN_URL_OVERRIDE = https://github.com/login/oauth/access_token
#LEAN_OIDC_USERINFO_URL_OVERRIDE = https://api.github.com/user,https://api.github.com/user/emails
#LEAN_OIDC_SCOPES = user:email,read:user
#LEAN_OIDC_FIELD_EMAIL = 0.email
#LEAN_OIDC_FIELD_FIRSTNAME = name


## Redis (for session storage and cache)
LEAN_USE_REDIS = false                             # Set to true to use redis as session cache
LEAN_REDIS_URL = ''                                # Add URL path such as tcp://1.2.3.4:6379. If you are using a password, add ?auth=yourverycomplexpasswordhere to your URL
LEAN_REDIS_HOST = ''
LEAN_REDIS_PORT = 6379
LEAN_REDIS_PASSWORD = ''
LEAN_REDIS_SCHEME = ''

## Rate limiting
LEAN_RATELIMIT_GENERAL = 1000
LEAN_RATELIMIT_API = 10
LEAN_RATELIMIT_AUTH = 20

leantime-2026-04-09.log

[davidelectricfree]

my updating docker compose file

synology ds923+

version: '3.3'

services:
  leantime_db:
    image: mysql:8.4
    container_name: leantime_db
    volumes:
      - db_data:/var/lib/mysql
    restart: unless-stopped
    env_file: ./.env                                        # Environment file with settings
    networks:
      - leantime-net
    command: --character-set-server=UTF8MB4 --collation-server=UTF8MB4_unicode_ci
    healthcheck:
      test: ["CMD", "mysqladmin", "ping", "-h", "localhost"]
      interval: 30s
      timeout: 10s
      retries: 3

  leantime:
    image: leantime/leantime:${LEAN_VERSION:-latest}
    container_name: leantime
    restart: unless-stopped
    env_file: ./.env                                        # Environment file with settings
    # Add security options
    security_opt:
      - no-new-privileges:true
    # Add capabilities
    cap_add:
      # - CAP_NET_BIND_SERVICE
      - CAP_CHOWN
      - CAP_SETGID
      - CAP_SETUID
    ports:
      - "${LEAN_PORT:-8020}:8080"
    networks:
      - leantime-net
    volumes:
      - ./public_userfiles:/var/www/html/public/userfiles     # Volume to store public files, logo etc
      - ./userfiles:/var/www/html/userfiles                   # Original volume name for compatibility
      - ./plugins:/var/www/html/app/Plugins                   # Plugin storage
      - ./logs:/var/www/html/storage/logs                     # Log storage
    depends_on:
      leantime_db:
        condition: service_healthy

  # Add a helper container for volume permissions
  # Run via docker compose --profile mysql_helper up -d
  mysql_helper:
    image: mysql:8.4
    command: chown -R mysql:mysql /var/lib/mysql
    volumes:
      - db_data:/var/lib/mysql
    user: root
    profiles: [ "helper" ]

volumes:
  db_data:
#  userfiles:                                               # New volume for public files
#  public_userfiles:
#  plugins:
  #logs:

networks:
  leantime-net:

[marcelfolaron]

Triage follow-up (automated)

Thanks for the updated config and compose file. I can see a couple more issues:

1. LEAN_APP_DIR = '/leantime' — this sets the cookie path to /leantime, but your app is served at the root (/). Unless you're running Leantime in a subfolder, remove this line or set it to LEAN_APP_DIR = ''. With it set to /leantime, session cookies won't attach to your root-path requests, which could prevent the install wizard from progressing.

2. LEAN_SECONDARY_COLOR = ' #00a886' — there's a leading space before #00a886. This might cause a config parsing issue.

3. Bind mounts vs named volumes — you switched from named Docker volumes to bind mounts (./public_userfiles, ./userfiles, ./plugins). Make sure those directories exist and are writable by the container user (UID 1000 based on your config). If permissions are wrong, the app might silently fail to write session or config data.

Next step: Remove (or empty) the LEAN_APP_DIR setting, recreate the containers (docker compose down && docker compose up -d), and try the setup again. If the password field still doesn't appear, share the contents of the new log file — specifically look for any line containing SQLSTATE, session, or install.