Docs and wikis, checked 2026-09-07

Stirling PDF: Docker configuration reference

Self-hosted PDF toolkit covering conversion, merging, OCR, signing and over 60 other page and document operations.

At a glance

Image: docker.stirlingpdf.com/stirlingtools/stirling-pdf
Tags: latest, latest-fat, latest-ultra-lite, 2.14.3, 2.14.3-fat
Licence: MIT
Source: https://github.com/Stirling-Tools/Stirling-PDF
Docs: https://docs.stirlingpdf.com/

Ports

Ports
Port	What listens	Source
`8080`	HTTP listener for the web UI and API. Route the reverse proxy here.	source for port 8080

Environment variables

Environment variables
Variable	Required	What it does	Example	Source
`SECURITY_ENABLELOGIN`	No	Defaults to true, which enables authentication and creates a default admin/stirling account. Set false to opt out of login entirely.	`false`	source for SECURITY_ENABLELOGIN
`SYSTEM_DEFAULTLOCALE`	No	Default interface language shown to users who have not picked one themselves; overrides the browser's detected language.	`en-GB`	source for SYSTEM_DEFAULTLOCALE
`SYSTEM_MAXFILESIZE`	No	Maximum upload size in MB, valid range 1 to 999. Separate from the underlying Spring multipart limits.	`500`	source for SYSTEM_MAXFILESIZE
`SECURITY_INITIALLOGIN_USERNAME`	No	Sets the initial admin username created on first boot when login is enabled, instead of the default admin/stirling pair.	`admin`	source for SECURITY_INITIALLOGIN_USERNAME

Volumes that must persist

Volumes
Path	What is in it	Source
`/configs`	Settings and the application database. The one directory that has to be persisted.	source for /configs
`/usr/share/tessdata`	OCR language files for Tesseract. Losing this just means re-downloading language packs.	source for /usr/share/tessdata
`/logs`	Application logs, useful to persist for diagnostics across restarts.	source for /logs

Behind a reverse proxy

Route the proxy to port 8080; the container ships no separate websocket service, so a plain HTTP proxy is enough. source for this reverse-proxy note
If large PDFs are rejected, raise both SYSTEM_MAXFILESIZE and the proxy's own request body size limit; the app-level limit does not change the proxy's. source for this reverse-proxy note

Release timeline

Releases
Version	Date	Breaking	What changed	Source
`v2.14.3`	2026-08-06	No	Hotfix for merge, split and other tools failing on Debian 12 and Fedora 44, concurrent merge issues and large 2GB PDF handling.	source for release v2.14.3
`v2.14.2`	2026-07-08	No	Server-only hotfix for certain Postgres connections failing to load user data.	source for release v2.14.2
`v2.14.1`	2026-07-07	No	Fixes certificate signing failing on certain installations and a rearrange pages bug causing the tool to fail.	source for release v2.14.1
`v2.14.0`	2026-06-30	No	Adds desktop hardware token signing (PKCS#11) and reintroduces shared signing and file sharing controls in the main navigation.	source for release v2.14.0
`v2.13.2`	2026-06-24	No	Security fixes and removal of unused dependencies from the Docker image, plus a desktop UI performance fix.	source for release v2.13.2

If it is not coming up

Read from the upstream documentation, repository and container registry by Keita Emsden on 2026-09-07. Every row links the page it came from. Upstream changes without telling anyone, so check the source link before you rely on a value.

Other app references

All app references