Standard Notes self hosted: private, encrypted notes for business

Standard Notes, a secure note‑taking app built for people who want privacy without giving up convenience. If you run a small business, you’re constantly handling sensitive information: client meeting notes, vendor pricing, internal procedures, passwords you’re not ready to put in a shared system, or draft proposals before they’re public. Standard Notes is designed so those notes stay private, because they’re protected with end‑to‑end encryption.

That’s the core workflow in Standard Notes: write, tag, search, and sync—while keeping business notes private by design.

Formable's Standard Notes Portainer stack docker-compose.yml

services:
  server:
    image: standardnotes/server
    environment:
      - DB_HOST
      - DB_PORT=3306
      - DB_USERNAME=${DB_USER}
      - DB_PASSWORD=${DB_PASS}
      - DB_DATABASE=standard_notes_db
      - DB_TYPE=mysql
      - REDIS_PORT=6379
      - REDIS_HOST=cache
      - CACHE_TYPE=redis
      - AUTH_JWT_SECRET
      - AUTH_SERVER_ENCRYPTION_SERVER_KEY
      - VALET_TOKEN_SECRET
      - COOKIE_DOMAIN
      - PUBLIC_FILES_SERVER_URL
      - AUTH_SERVER_DISABLE_USER_REGISTRATION
    restart: unless-stopped
    ports:
      - ${APP_PORT}:3000
      - 3125:3104
    volumes:
      - logs_data:/var/lib/server/logs
      - uploads_data:/opt/server/packages/files/dist/uploads

  localstack:
    image: localstack/localstack:3.0
    expose:
      - 4566
    restart: unless-stopped
    environment:
      - SERVICES=sns,sqs
      - HOSTNAME_EXTERNAL
      - LS_LOG=warn
    volumes:
      - type: bind
        source: /home/forge/standardnotes/localstack_bootstrap.sh
        target: /etc/localstack/init/ready.d/localstack_bootstrap.sh

  db:
    image: mysql:8.3
    environment:
      - MYSQL_DATABASE=standard_notes_db
      - MYSQL_USER=${DB_USER}
      - MYSQL_ROOT_PASSWORD=${DB_PASS}
      - MYSQL_PASSWORD=${DB_PASS}
    expose:
      - 3306
    restart: unless-stopped
    volumes:
      - mysql_data:/var/lib/mysql
      - import_data:/docker-entrypoint-initdb.d

  cache:
    image: redis:6.0-alpine
    volumes:
      - redis_data:/data
    expose:
      - 6379
    restart: unless-stopped

volumes:
  logs_data:
  uploads_data:
  mysql_data:
  import_data:  
  redis_data: