DockerCompose file & guide

$ docker compose up -d

Updated2 minutes ago

LanguageJavaScript

Setup difficultyModerate

Stars: 21 168
RAM: 1 GB RAM minimum free, production server should have minimum total 4 GB RAM
Port: 8080 (Wekan application listens internally; mapped as host:8080 in compose)
Requires: FerretDB v1

Docker

ghcr.io/wekan/wekan

WeKan Swimlanes view showing kanban board interface

What is Wekan?

WeKan is an open-source collaborative kanban board application released under MIT license. It helps teams and individuals organize tasks visually through boards, lists, and cards. The application supports real-time updates, drag-and-drop reordering, multiple board views including calendar and Gantt charts, import/export to many formats (Trello, Jira, Asana, Excel), SAML/LDAP/OAuth2 authentication, and global webhooks. Users can customize card fields, set due dates, add attachments, comments, and checklists. WeKan runs on Docker Compose with embedded FerretDB SQLite by default, or with PostgreSQL/MySQL/SAP HANA/MongoDB. Installation options include Windows/Mac/Linux bundles, Snap, Docker, Kubernetes, and Sandstorm.

Wekan alternatives

Should you self-host Wekan?

Wekan scores 74/100 on selfhost.directory (how scoring works) and ranks #5 of 45 in Project Management. It has 21 168 GitHub stars, +58 in the last 30 days.

It shipped 349 stable releases in the past year. The latest, v13.08, came out on 12 November 2026.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is MIT-licensed and written mostly in JavaScript.

Its closest alternative on selfhost.directory is Plane (86/100, 62 364 stars). It scores higher overall, so compare the two before you pick. See Wekan vs Plane side by side.

Features

Custom Fields
Rules Engine

WeKan ® - Open Source kanban

Downloads

https://wekan.fi/install/

Screenshot

Wekan releases & version history

I'm on

v13.08Release

11/12/2026 · 4 minutes ago

In short

The REST API creates a card under the parent it is given,
and a refused integration URL no longer leaves the other fields of the same
update written. The single-file WeKan for 32-bit ARM builds again, with
an i386 Node.js of the exact version its bundle embeds. A GitHub CodeQL
alert in the security alert download script is fixed.

Thanks to above GitHub users for their contributions.

More details at ChangeLog

v13.07Release

11/12/2026 · 10 hours ago

AI summary ListLockAttachBleed fixed and spent time reads as a duration

In short

ListLockAttachBleed is fixed: when a list refuses a role
write access, that refusal now also holds for the attachment API's upload,
delete, copy and move. CodeQL alerts #602 and #603 in the tests are fixed,
fast-xml-parser is updated to 5.12.0, spent time reads as a duration,
the indexes that LDAP, card member and History queries need are added, and
Admin Panel → Problems can Clear resolved problems, which also age out.

Security

A list that refuses a role write access refuses its attachment API writes too. Thanks to Furkan Derse and xet7.

ListLockAttachBleed,
reported by email, its GitHub security advisory awaited. A board admin can
refuse a role write access in one list (#4527). The card screen, the card and
checklist routes (ListLockBleed)
and the interface's own attachment upload and delete applied that refusal, but
the attachment API's upload, delete, copy and move, over REST and DDP, asked
only for board write access and the assigned-only rule. A normal member the
list refused could therefore still add and remove files on its cards. Every
attachment write that names a card now asks that card's list as well, a move
both the card it takes the file from and the one it puts it on, and the
refusal shows in Admin Panel / Problems. tests/listLockAttachments.test.cjs
runs the guard on the reported case and fails on any attachment write in the
tree without the list check beside it, and
tests/playwright/specs/list-lock-attachments.e2e.js replays the writes
against a running server.

Thanks to above GitHub users for their contributions.

More details at ChangeLog

v13.06Release

11/10/2026 · yesterday

AI summary Fixed overtime bug and cleaned up deleted user references

In short

CodeQL alert #601 in a test is fixed, with two more tests
that had the same fault. A card's overtime set through the REST API is
saved where WeKan reads it, and cards that lost it before are repaired at
startup. Card members and assignees whose account was deleted can be removed
and added without an error, and clearing a card date no longer passes as a
date set to the rules, the due date count and the activity feed.

Thanks to above GitHub users for their contributions.

More details at ChangeLog

v13.05Release

11/10/2026 · 2 days ago

AI summary Android bundles build again

In short

WeKan is updated to Meteor 3.6. The Android bundles
build again, after v13.04's npm retry broke their install, and the Super
Productivity export no longer fails for a board with a card whose list is
archived.

Thanks to above GitHub users for their contributions.

More details at ChangeLog

v13.04Release

11/9/2026 · 2 days ago

AI summary ListLockBleed fix and bundle retry improvements

In short

ListLockBleed is fixed: when a list refuses a role write
access, that refusal now also holds for the checklist and checklist-item REST
routes. The Sandstorm and Android bundles retry their npm install when
github.com is briefly unavailable.

Security

A list that refuses a role write access refuses its checklist REST writes too. Thanks to tsurutanmen and xet7.

ListLockBleed,
GHSA-4734-8vrg-8j3w.
A board admin can refuse a role write access in one list (#4527). The card
and comment REST routes and the DDP checklist writes applied that refusal,
but the six checklist and checklist-item REST routes asked only the board. A
member the list refused could therefore still create, rename, tick and delete
the checklists of its cards with an API token. Those routes now ask the
card's list and answer 403, and the refusal shows in Admin Panel / Problems.
tests/listPermissions.test.cjs fails for any REST write route of the tree
that names a card without asking its list. And
tests/playwright/specs/list-lock-checklists.e2e.js replays the six writes
against a running server.

Thanks to above GitHub users for their contributions.

More details at ChangeLog

Even more releases RSS

@ Every self-hosted release, weekly

One Monday email with the week's stable releases across the directory.

Rate this project

Click to rate — no account needed.

0 comments

Loading comments…

21 168stars

GitHub Website

Rating

Links

Install Documentation Upgrade Documentation

Port	8080Wekan application listens internally; mapped as host:8080 in compose
Audience	Teams
RAM	1 GB RAM minimum free, production server should have minimum total 4 GB RAM
First release	31 Jan 2026
Age	9 months

Docker

ghcr.io/wekan/wekan

wekanteam/wekan

quay.io/wekan/wekan

Requires

FerretDB v1
MongoDBoptional

Auth

Built-inLDAPOIDCSAML

Monetization

donateopen core

Languages

JavaScript

Platforms

Docker Kubernetes Windows Snap

Self-host Wekan

What is Wekan?

Wekan alternatives

Should you self-host Wekan?