How to Self-Host and Install Ghost on Your Linux Server

Ghost is an open-source content management program that allows you to easily create a blog and a newsletter service. You can choose to subscribe to the Ghost(Pro) service to use the CMS, or, if you are more technically inclined, self-host it on your server. Here we show you the latter – self-host Ghost on your Linux server.

Why You Should Self-host Ghost on Your Server

One of the advantages of a Ghost blog is that it provides an integrated, feature-filled platform that works right out of the box. This includes the ability to track analytics, monetize posts, and create automatic newsletters for your subscribers.

Installing Ghost on your server allows you to be a publisher without relying on a third party to manage your data. This can be helpful if you are a journalist who is putting out critical articles about controversial topics.

Lastly, Ghost is easy to deploy and maintain, even for non-technical users. Unlike traditional CMS platforms, Ghost provides an all-in-one solution that you can “set and forget” on your hosting machine.

Good to know: Learn how to host a web archive on Linux using Archivebox.

Installing Ghost on your Server

Assumption: Before we start, we assume that you already have a Linux server available and a domain name to host your Ghost installation. If you need to rent a Linux server, we recommend DigitalOcean or Linode.

Since we will be using Docker, we will need to install Docker on the server first.

1. Install the Docker project’s repository public key:

sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg

2. Create a new repository file in your machine’s apt config directory:

sudo nano /etc/apt/sources.list.d/docker.list

3. Paste the following line of code inside your new repository file:

deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu jammy stable

4. Refresh your system’s repository listings and upgrade the existing binaries in your machine:

sudo apt update
sudo apt upgrade

5. Install Docker and Docker Compose along with their dependencies:

sudo apt install wget docker-ce docker-ce-cli containerd.io docker-compose-plugin docker-buildx-plugin

6. Add your user to the Docker group

sudo usermod -aG docker $USER

7. Set Docker service to run on startup:

sudo systemctl enable docker.service

8. Reboot the server.

Setting Up Gmail for SMTP Delivery

Ghost doesn’t come with its own email delivery client, so we need to hook it up to Gmail for email delivery.

1. Open a web browser and login to the Gmail account that you want to link to your Ghost instance.

2. Click the Profile Icon of your account, then click “Manage your Google Account.”

3. Select the “Security” category, then click the “2-Step Verification” option under the “How you sign in to Google” subcategory.

4. Verify your phone number and enable 2-step Verification.

5. Go back to the “Security” category, then click the “2-Step Verification” option again. This will open a new menu screen where you can set new secondary keys for your account. Scroll to the bottom of the page, then click “App passwords.”

6. Select “Mail” for the first dropdown list, then select “Other” on the second.

7. Write “Gmail for Ghost” on the textbox, then click “Generate.” This will open a window with a yellow textbox containing your custom application password.

FYI: You can also use other external delivery agents to send mail through Ghost. Learn how to create your own email server using Mail-in-a-Box.

Building the Docker Container

1. Create a new directory for your Ghost installation’s dockerfiles:

2. Create a new docker-compose.yml file using your favorite text editor:

nano ./docker-compose.yml

3. Paste the following block of code inside your new docker-compose.yml file and save it.

---
version: "3"
services:
  ghost:
    image: ghost:latest
    restart: always
    ports:
      - 8080:2368
    environment:
      database__client: mysql
      database__connection__host: db
      database__connection__database: ghost
      database__connection__user: ghost
      database__connection__password: ghost
      url: ${GHOST_URL}
      mail__transport: ${MAIL_TRANSPORT}
      mail__options__host: ${MAIL_HOST}
      mail__options__port: ${MAIL_PORT}
      mail__options__secureConnection: ${MAIL_SECURE_CONNECTION}
      mail__options__auth__user: ${MAIL_USER}
      mail__options__auth__pass: ${MAIL_PASSWORD}
    volumes:
      - ghost-data:/var/lib/ghost/content
    links:
      - db
  db:
    image: mysql:8.0
    restart: always
    environment:
      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
      MYSQL_DATABASE: ghost
      MYSQL_USER: ghost
      MYSQL_PASSWORD: ghost
    cap_add:
      - SYS_NICE
    volumes:
      - ghost-db:/var/lib/mysql
volumes:
  ghost-data: null
  ghost-db: null

4. Create a “.env” file inside your Ghost docker directory:

5. Paste the following block of code inside your new .env file:

# URL
GHOST_URL="#REPLACE_ME_WITH_DOMAIN_NAME#"
# Database
MYSQL_ROOT_PASSWORD="#REPLACE_ME_WITH_SECURE_PASSWORD#"
# SMTP variables
MAIL_SERVICE="Gmail"
MAIL_TRANSPORT="SMTP"
MAIL_USER="#REPLACE_ME_WITH_YOUR_GMAIL_ADDRESS#"
MAIL_PASSWORD="#REPLACE_ME_WITH_YOUR_APP_PASSWORD#"
MAIL_HOST="smtp.gmail.com"
MAIL_PORT="465"
MAIL_SECURE_CONNECTION="true"

• Change the value for the “GHOST_URL” variable from “#REPLACE_ME_WITH_DOMAIN_NAME#” to your complete domain name.

• Replace the value of the “MYSQL_ROOT_PASSWORD” with a sufficiently random password.
• Change the value of both the “MAIL_USER” and “MAIL_PASSWORD” with the email address of your Gmail account and its Application Password.

Note: You need to write the Gmail application password with no spaces in between each segment.

6. Build the Ghost Docker container by running the following command:

sudo docker compose up -d

Setting up a Reverse Proxy

With Ghost running in the backend, we need to set up a reverse proxy to be able to access Ghost publicly. In this case, we will use Nginx’s reverse proxy.

1. Install the Nginx web server package. This will serve as your reverse proxy daemon which will take connections from the internet and redirect it to Ghost.

2. Create a new Nginx site config file using your favorite text editor:

sudo nano /etc/nginx/sites-available/ghost

3. Paste the following block of code inside your new site config file:

server {
   listen 80;
   listen [::]:80;
 
   root                    /var/www/html;
   server_name             ghost.myvpsserver.top;
 
   location / {
       proxy_set_header    X-Forwarded-For $remote_addr;
       proxy_set_header    Host $http_host;
       proxy_set_header    X-Forwarded-Proto $scheme;
       proxy_pass          http://127.0.0.1:8080;
   }
}

4. Create a symbolic link for your Ghost site config:

sudo ln -s /etc/nginx/sites-available/ghost /etc/nginx/sites-enabled/

5. Enable the Nginx web server service using systemctl:

sudo systemctl enable --now nginx.service

Enabling SSL on Your Nginx Reverse Proxy

1. Ensure that the “core” snap package is present in your machine:

2. Install the certbot snap package:

sudo snap install certbot --classic

3. Register your certbot installation to your email address by running the following command:

sudo certbot register --agree-tos --email ramces@email.invalid

4. Request a new SSL certificate for your Ghost blog:

sudo certbot --nginx -d ghost.myvpsserver.top

5. Test whether your new Ghost instance is accessible through SSL by opening a web browser and loading your domain name.

Running Ghost on a Local Machine

If you don’t have a server and want to install Ghost on your local machine, you can too. In addition, you can make use of Tailscale to access it everywhere on your browser.

1. Install the Tailscale VPN daemon in your machine and link it to your Tailscale account. Go to your Tailscale Administrator Console and click the “DNS” tab on the console’s top bar.

2. Click the “Rename tailnet…” button under the “Tailnet name” subcategory.

3. Set your machine’s hostname to “ghost” followed by the new subdomain for your Tailscale network:

sudo hostnamectl set-hostname ghost.your-tailnet.ts.net

Enabling Tailscale Funnel

1. Open the Tailscale Administrator Console and click the “DNS” tab.

2. Scroll down to the bottom of the page then click “Enable HTTPS…”

3. Scroll back up to the top of the page, then click the “Access control” tab.

4. Click the “Add Funnel to policy” button.

5. Run the following command to create a reverse proxy between Tailscale and your local Docker container:

sudo tailscale serve https / http://127.0.0.1:8080

6. Enable the Tailscale funnel for your reverse proxy by running the following command:

sudo tailscale funnel 443 on

7. Test whether your new Ghost instance is accessible through your Tailscale funnel by opening a web browser and loading your Tailscale address.

Using Ghost The First Time

1. Open a web browser and navigate to your Ghost installation URL followed by the subdirectory “/ghost.”

2. Click the first field and provide a name for your new Ghost blog. Fill in the rest of the fields with details about your admin user, then click “Create account & start publishing.”

Creating Your First Post in Ghost

1. Click the “Write your first post” button on the Ghost onboarding page.

2. This will bring up a plain text editor where you can write a simple text post. Click “Publish” once you are done to create a new test post.

3. Check your Ghost front page to see if the new post went through.

Adding a New User to Ghost

1. Go back to your Ghost Administrator Console, then click “Members” on the page’s left sidebar.

2. Click the “New Member” button on the page’s upper right corner.

3. Fill in the details of your new member, then click “Save” to add them on the blog’s newsletter feed.

Good to know: Learn how to deploy and host your own Twitter clone using Pleroma.

Frequently Asked Questions

Image credit: WORKING OFFICE COMMUNICATION PEOPLE USING COMPUTER BLOG CONCEPT and traditional halloween ghost cookie by 123RF.

Ramces Red

Ramces is a technology writer that lived with computers all his life. A prolific reader and a student of Anthropology, he is an eccentric character that writes articles about Linux and anything *nix.