penpot-optimified

Self-hosted Penpot instance for Optimified. Open-source design tool (Figma alternative). ## Info - **URL:** https://design.optimified.com - **Server:** Railway → project `otf-penpot` (`6c601dc5`), 6 services - **Services:** frontend (`ccf1c2d9`), backend (`99f4fe1b`), exporter (`a4122f76`), postgres (`5928479a`), minio (`9aa58cac`), valkey (`09c19ac5`) - **Status:** running - **Frontend port:** 8080 - **Railway domain:** `frontend-production-9099.up.railway.app` - **MinIO bucket:** `penpot-assets` (object storage for uploads/exports) - **SMTP:** Resend via `smtp.resend.com:587`, from `noreply@alert.optimified.com` - **Telemetry:** disabled - **Registration:** disabled (2026-03-26) - **Flags:** `enable-prepl-server enable-smtp enable-login-with-password disable-registration disable-email-verification` - **Variables (sensitive — stored in Railway only):** `PENPOT_SECRET_KEY`, `PENPOT_DATABASE_PASSWORD`, `AWS_SECRET_ACCESS_KEY`, `SMTP_PASSWORD` ## Access | Account | Role | Added via | |---------|------|-----------| | mike@optimified.com | Admin (instance owner) | Self-registered before lockdown | | Team members | Editor | Invited by admin | ### User Permissions (Community Edition) - Any user can create teams, projects, and drafts in their personal workspace - Any user can invite others to teams they own - Team roles: Owner, Admin, Editor — managed per team, not instance-wide - No instance-level RBAC — no way to restrict team creation or enforce global roles - Admin = first registered user (mike@) — can manage instance settings only ### Onboarding New Users 1. Mike invites via Penpot UI: Team → Invite (sends email via Resend SMTP) 2. Invitee clicks link, sets password — no public signup available 3. Invitee joins the shared Optimified team automatically 4. Personal workspace is created for drafts/practice ## Changelog All notable changes to this Penpot setup. ### [Unreleased] ### [1.0.0] - 2026-03-26 #### Added - Deployed on Railway under `otf-penpot` project (template deploy) - Custom domain `design.optimified.com` configured (Cloudflare proxied) - MinIO bucket `penpot-assets` created for object storage - SMTP configured via Resend - Telemetry disabled - Admin account created (mike@optimified.com) ### [1.1.0] - 2026-03-26 #### Changed - Disabled public registration (`disable-registration` flag) - Disabled email verification (`disable-email-verification` flag) - New users added via admin invitation only