Requirements
This page lists what you need before you install. Read it, then go to the install procedure for your platform.
Supported hosts
BareBones Ticketing runs on one host. There are two install shapes.
| Shape | Host operating systems | How the application runs | Default database |
|---|---|---|---|
| Windows Server | Windows Server 2019, 2022, 2025 | Self-contained win-x64 build registered as the
BareBonesTicketing Windows Service, served by Kestrel |
Product-managed local PostgreSQL 18 on the same host |
| Linux Docker Compose | RHEL 9, Rocky Linux 9, Ubuntu Server 24.04, Debian 12 | Vendor-supplied Compose bundle on Docker Engine with the Docker Compose plugin | Bundled postgres:18 container |
Where this has been installed and checked
Two hosts have a full clean-install run against this build: Windows Server 2019, from a clean default installation, and Rocky Linux 9.7, from a clean minimal installation. If you have a free choice of host, choose one of those — they are the paths we have walked end to end.
Every other supported host has also been installed against this build: each from a fresh minimal OS installation, through to the product serving its first-time setup page. Ubuntu Server 24.04.4 additionally has a deeper run recorded against an earlier build — Compose install, database bootstrap, HTTPS setup, restart continuity, and backup and restore all covered.
Support covers the whole supported list, not only the two we have walked, where your edition carries a support entitlement. See Editions.
One pairing is worth knowing about: Windows Server 2019 with the product-managed local PostgreSQL 18. The PostgreSQL 18 Windows installer's published tested-platform list names Windows Server 2022 and 2025, so the 2019 pairing rests on our own clean-install acceptance run rather than on the database distribution's published matrix. It is the pairing whose evidence is ours alone.
Database
- PostgreSQL is the only database BareBones Ticketing supports.
- Windows local mode installs PostgreSQL server version
18.4-2and its command-line tools. It does not install pgAdmin or StackBuilder. - Linux bundled mode runs the
postgres:18image. Both platforms run PostgreSQL 18, so the bundled database is the same major version whichever platform you install on. External mode is the exception — match your backup and restore commands to the version that server actually runs. - External mode connects to a PostgreSQL database that already exists. You create that database; the installer does not.
See PostgreSQL for what setup does to the database.
Network name and HTTPS
- One stable DNS name or approved host address.
- HTTPS for setup and for all administration afterwards. There is no supported plain-HTTP setup path.
- Inbound TCP port
8443. This is the package default on both platforms. - Accurate host clock. Authentication, approvals, SLA records, and licence calls depend on it.
BareBones Ticketing does not create DNS records, obtain public
certificates, configure Linux firewalls, or configure an external
reverse proxy. The Windows installer creates one inbound firewall rule
for TCP 8443 and nothing else. The rule has two names: its
internal name is BareBonesTicketing-HTTPS, and its display
name is BareBones Ticketing HTTPS. Windows Defender
Firewall (wf.msc) and the default
Get-NetFirewallRule output show the display name.
Storage and continuity
Four sets of data must survive a host failure. Back them up together — they are only consistent with each other.
| Continuity class | What it holds | Loss means |
|---|---|---|
| PostgreSQL data | Tickets, users, configuration, audit history | The system of record is gone |
| Attachments | Files attached to tickets | Tickets reference files that no longer exist |
| Data Protection key ring folder | The keys that protect stored secrets and cookies, and the managed HTTPS certificate file, which is stored inside the same folder | Protected settings cannot be read back, and the managed certificate is gone |
| Deployment configuration | Generated runtime configuration, the versioned deployment bundle or
package with its checksum, and the procedure for re-entering protected
settings. On Windows this includes
C:\ProgramData\BareBonesTicketing\install. On Linux it
includes the package-root .env. |
The installation cannot be rebuilt as configured |
Back up the whole key ring folder, not the key XML files inside it.
The managed HTTPS certificate .pfx lives in a subfolder of
that same folder. Copying only the key XML loses the certificate without
reporting an error.
The Windows install directory holds an
administrator-only local-database maintenance credential that cannot be
recovered from anywhere else. Treat it as secret-bearing and back it up
with the rest of the set. The Linux .env is secret-bearing
in the same way.
Changing a configured attachment path or key-ring path does not move the existing files. You move them. The product does not create folders, set permissions, mount network shares, or migrate data.
Named owners
Before you install, name a person for each of these:
- PostgreSQL administration
- DNS, firewall, and reverse proxy
- Certificates
- Storage and backup/restore
- The first System Administrator account
- Accepting the Product License Agreement on behalf of the organization
Outside the 1.0 baseline
These are not supported. The list is factual, not a roadmap.
| Topology or component | Status |
|---|---|
| Direct source-hosted production deployment | Not supported |
| Docker Desktop on Windows Server | Not supported |
| Windows containers or Docker-on-Windows | Not supported |
| Podman, nerdctl, other Compose implementations | Not supported |
| Kubernetes, Helm, Docker Swarm, Nomad, OpenShift | Not supported |
| Multi-node, load-balanced, or high-availability topology | Not supported |
| Redis or OpenSearch as baseline components | Not part of 1.0 |
| Attachment storage backends other than the filesystem | Not supported |
| Any database other than PostgreSQL | Not supported |
Internet Information Services (IIS) is not in this list, deliberately. The Windows package runs as a Windows Service under Kestrel and does not require or use IIS. That is different from IIS hosting being an unsupported topology, and the product documentation does not make the stronger claim — so neither does this page.
The package
You install from a customer package supplied by the vendor: the application files, a manifest, integrity evidence, the legal material, and the procedure for that exact version.
Get the package from your Finlay.works customer area. Downloads are listed there against an active licence, filtered to the editions that licence is eligible for. Check the version and SHA-256 against what you intended to install. Do not substitute a source checkout, an internal build, a review bundle, or a container image pulled from a registry.
Next step
Go to the install procedure for your platform: