Deployment

ashim ships as a single Docker container. The image supports linux/amd64 (with NVIDIA CUDA) and linux/arm64 (CPU), so it runs natively on Intel/AMD servers, Apple Silicon Macs, and ARM devices like the Raspberry Pi 4/5.

See Docker Image for GPU setup, Docker Compose examples, and version pinning.

Docker Compose (recommended)

services:
  ashim:
    image: ashimhq/ashim:latest
    container_name: ashim
    ports:
      - "1349:1349"
    volumes:
      - ashim-data:/data
      - ashim-workspace:/tmp/workspace
    environment:
      - AUTH_ENABLED=true
      - DEFAULT_USERNAME=admin
      - DEFAULT_PASSWORD=admin
    restart: unless-stopped

volumes:
  ashim-data:
  ashim-workspace:

docker compose up -d

The app is then available at http://localhost:1349.

Docker Hub rate limits? Replace ashimhq/ashim:latest with ghcr.io/ashim-hq/ashim:latest to pull from GitHub Container Registry instead. Both registries receive the same image on every release.

What's inside the container

The Docker image uses a multi-stage build:

1. Build stage -- Installs Node.js dependencies and builds the React frontend with Vite.
2. Production stage -- Copies the built frontend and API source into a Node 22 image, installs system dependencies (Python 3, ImageMagick, Tesseract, potrace), sets up a Python virtual environment with all ML packages, and pre-downloads model weights.

Everything runs from a single process. The Fastify server handles API requests and serves the frontend SPA.

System dependencies installed in the image

• Python 3 with pip
• ImageMagick
• Tesseract OCR
• libraw (RAW image support)
• potrace (bitmap to vector conversion)

Python packages

• rembg with BiRefNet-Lite (background removal)
• RealESRGAN (upscaling)
• PaddleOCR (text recognition)
• MediaPipe (face detection)
• OpenCV (inpainting/object removal)
• onnxruntime, opencv-python, Pillow, numpy

Model weights are downloaded at build time, so the container works fully offline.

Architecture notes

All tools work on both amd64 and arm64. AI tools (background removal, upscaling, OCR, face detection) use CUDA-accelerated packages on amd64 and CPU packages on arm64. GPU acceleration is auto-detected at runtime when --gpus all is passed.

Volumes

Mount these to persist data:

Mount point	Purpose
/data	SQLite database (users, API keys, pipelines, settings)
/tmp/workspace	Temporary image processing files

The /data volume is the important one. Without it, you lose all user accounts and saved pipelines on container restart. The workspace volume is optional but prevents the container's writable layer from growing.

Health check

The container includes a health check that hits GET /api/v1/health. Docker uses this to report container status:

docker inspect --format='{{.State.Health.Status}}' ashim

Reverse proxy

If you're running ashim behind nginx or Caddy, point it at port 1349. Example nginx config:

server {
    listen 80;
    server_name images.example.com;

    client_max_body_size 200M;

    location / {
        proxy_pass http://localhost:1349;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
    }
}

Set client_max_body_size to match your MAX_UPLOAD_SIZE_MB value.

CI/CD

The GitHub repository has three workflows:

• ci.yml -- Runs automatically on every push and PR. Lints, typechecks, tests, builds, and validates the Docker image (without pushing).
• release.yml -- Triggered manually via workflow_dispatch. Runs semantic-release to create a version tag and GitHub release, then builds a multi-arch Docker image (amd64 + arm64) and pushes to Docker Hub (ashimhq/ashim) and GitHub Container Registry (ghcr.io/ashim-hq/ashim).
• deploy-docs.yml -- Builds this documentation site and deploys it to GitHub Pages on push to main.

To create a release, go to Actions > Release > Run workflow in the GitHub UI, or run:

gh workflow run release.yml

Semantic-release determines the version from commit history. The latest Docker tag always points to the most recent release.