---
title: "Installation"
---

### Installation

Prowler Local Server offers flexible installation methods tailored to various environments.

Refer to the [Prowler Cloud guide](/user-guide/tutorials/prowler-app) for detailed usage instructions.

<Warning>
  Prowler configuration is based on `.env` files. Every version of Prowler can have differences on that file, so, please, use the file that corresponds with that version or repository branch or tag.
</Warning>

<Tabs>
  <Tab title="Docker Compose">
    _Requirements_:

    - `Docker Compose` installed: https://docs.docker.com/compose/install/.

    _Commands_:

    <CodeGroup>
    ```bash macOS/Linux
    VERSION=$(curl -s https://api.github.com/repos/prowler-cloud/prowler/releases/latest | jq -r .tag_name)
    curl -sLO "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/${VERSION}/docker-compose.yml"
    # Environment variables can be customized in the .env file. Using default values in production environments is not recommended.
    curl -sLO "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/${VERSION}/.env"
    docker compose up -d
    ```

    ```powershell Windows PowerShell
    $VERSION = (Invoke-RestMethod -Uri "https://api.github.com/repos/prowler-cloud/prowler/releases/latest").tag_name
    Invoke-WebRequest -Uri "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/$VERSION/docker-compose.yml" -OutFile "docker-compose.yml"
    # Environment variables can be customized in the .env file. Using default values in production environments is not recommended.
    Invoke-WebRequest -Uri "https://raw.githubusercontent.com/prowler-cloud/prowler/refs/tags/$VERSION/.env" -OutFile ".env"
    docker compose up -d
    ```
    </CodeGroup>

    <Callout icon="lock" iconType="regular" color="#e74c3c">
      For a secure setup, the API auto-generates a unique key pair, `DJANGO_TOKEN_SIGNING_KEY` and `DJANGO_TOKEN_VERIFYING_KEY`, and stores it in `~/.config/prowler-api` (non-container) or the bound Docker volume in `_data/api` (container). Never commit or reuse static/default keys. To rotate keys, delete the stored key files and restart the API.
    </Callout>

  </Tab>
  <Tab title="GitHub">
    _Requirements_:

    - `git` installed.
    - `uv` installed: [uv installation](https://docs.astral.sh/uv/getting-started/installation/).
    - `pnpm` installed through [Corepack](https://pnpm.io/installation#using-corepack) or the standalone [pnpm installation](https://pnpm.io/installation).
    - `Docker Compose` installed: https://docs.docker.com/compose/install/.

    <Warning>
      Make sure to have `api/.env` and `ui/.env.local` files with the required environment variables. You can find the required environment variables in the [`api/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/api/.env.example) and [`ui/.env.template`](https://github.com/prowler-cloud/prowler/blob/master/ui/.env.template) files.
    </Warning>
    _Commands to run the API_:

    ```bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    uv sync \
    source .venv/bin/activate \
    set -a \
    source .env \
    docker compose up postgres valkey -d \
    cd src/backend \
    python manage.py migrate --database admin \
    gunicorn -c config/guniconf.py config.wsgi:application
    ```

    > Now, you can access the API documentation at http://localhost:8080/api/v1/docs.

    _Commands to run the API Worker_:

    ```bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    uv sync \
    source .venv/bin/activate \
    set -a \
    source .env \
    cd src/backend \
    python -m celery -A config.celery worker -l info -E
    ```

    _Commands to run the API Scheduler_:

    ```bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/api \
    uv sync \
    source .venv/bin/activate \
    set -a \
    source .env \
    cd src/backend \
    python -m celery -A config.celery beat -l info --scheduler django_celery_beat.schedulers:DatabaseScheduler
    ```

    _Commands to run the UI_:

    ```bash
    git clone https://github.com/prowler-cloud/prowler \
    cd prowler/ui \
    corepack enable \
    corepack install \
    pnpm install --frozen-lockfile \
    pnpm run build \
    pnpm start
    ```

    > Enjoy Prowler Local Server at http://localhost:3000 by signing up with your email and password.

    <Warning>
      Google and GitHub authentication works out of the box in [Prowler Cloud](https://prowler.com). In Prowler Local Server it requires OAuth credentials: see [Social Login Configuration](/user-guide/tutorials/prowler-app-social-login).
    </Warning>
  </Tab>
</Tabs>

### Updating Prowler Local Server

Upgrade Prowler Local Server installation using one of two options:

#### Option 1: Updating the Environment File

To update the environment file:

Edit the `.env` file and change version values:

```env
PROWLER_UI_VERSION="5.35.0"
PROWLER_API_VERSION="5.35.0"
```

<Note>
  You can find the latest versions of Prowler Local Server in the [Releases Github section](https://github.com/prowler-cloud/prowler/releases) or in the [Container Versions](#container-versions) section of this documentation.
</Note>


#### Option 2: Using Docker Compose Pull

```bash
docker compose pull --policy always
```

The `--policy always` flag ensures that Docker pulls the latest images even if they already exist locally.

<Note>
  **What Gets Preserved During Upgrade**

  Everything is preserved, nothing will be deleted after the update.
</Note>

### Troubleshooting Installation Issues

If containers don't start, check logs for errors:

```bash
# Check logs for errors
docker compose logs

# Verify image versions
docker images | grep prowler
```

If issues are encountered, rollback to the previous version by changing the `.env` file back to the previous version and running:

```bash
docker compose pull
docker compose up -d
```

### Container Versions

The available versions of Prowler Local Server are the following:

- `latest`: in sync with `master` branch (please note that it is not a stable version)
- `v4-latest`: in sync with `v4` branch (please note that it is not a stable version)
- `v3-latest`: in sync with `v3` branch (please note that it is not a stable version)
- `<x.y.z>` (release): you can find the releases [here](https://github.com/prowler-cloud/prowler/releases), those are stable releases.
- `stable`: this tag always point to the latest release.
- `v4-stable`: this tag always point to the latest release for v4.
- `v3-stable`: this tag always point to the latest release for v3.

The container images are available here:

- Prowler Local Server:
  - [DockerHub - Prowler UI](https://hub.docker.com/r/prowlercloud/prowler-ui/tags)
  - [DockerHub - Prowler API](https://hub.docker.com/r/prowlercloud/prowler-api/tags)
