{
"stable": true,
"versions": {
"1.0.0": {
"manifest": {
"id": "tech.qdrant.cloudronapp",
"title": "Qdrant",
"author": "OrcVole",
"tagline": "High-performance vector database for AI and search",
"description": "Qdrant is a high-performance, open-source vector database and similarity-search engine written\nin Rust. It stores high-dimensional vectors together with JSON payloads and serves fast\nnearest-neighbour search over REST and gRPC, which makes it a building block for\nretrieval-augmented generation, semantic search, recommendations, and other AI workloads.\n\nThis package runs Qdrant on Cloudron with a secure, two-surface topology on a single domain:\n\n- The web dashboard (served under /dashboard) is placed behind Cloudron login, so only your\n Cloudron users can open the management UI.\n- The REST and gRPC data plane stays in front of Cloudron login and is protected by Qdrant's own\n API key, so programmatic clients and sibling apps authenticate with a key rather than being\n redirected to an interactive sign-in page.\n\nQdrant is insecure by default: its API is open to anyone who can reach it. This package closes\nthat gap. It generates a strong admin key and a separate read-only key on first start, enables\nJWT and role-based access control so you can mint scoped tokens, disables telemetry, refuses\nsnapshot recovery from arbitrary URLs, and configures Qdrant to reject writes rather than be\nkilled when it approaches its memory limit.\n\nAll persistent state lives under the application data directory, so Cloudron's backup covers it.\n\nThis is a community package. It tracks upstream Qdrant releases and keeps the upstream binary\nunmodified. Qdrant and the Qdrant name and logo are trademarks of their respective owner. This\npackage is community-maintained and is not affiliated with or endorsed by the Qdrant project.\n",
"changelog": "# Changelog\n\n[1.0.0]\n- Initial release. Packages Qdrant v1.18.2 on cloudron/base:5.0.0.\n- Two-surface topology on a single domain: the dashboard (/dashboard) behind the Cloudron\n proxyAuth addon, the REST and gRPC data plane in front of it and protected by Qdrant's API\n key.\n- Generates a strong admin key and a separate read-only key on first start. Enables JWT and\n role-based access control for scoped tokens.\n- Security hardening: telemetry disabled, snapshot recovery from remote URLs refused.\n- Memory protection: strict-mode resident-memory guard (reject writes, stay alive) together with\n on-disk payload, so the service degrades rather than being killed when memory runs low.\n- gRPC exposed on a Cloudron TCP port for high-throughput clients such as rig-qdrant.\n- All state under /app/data, covered by Cloudron backup. An optional in-container snapshot cron\n (off by default) writes an extra consistent artifact into the backup.\n",
"icon": "file://logo.png",
"version": "1.0.0",
"upstreamVersion": "1.18.2",
"healthCheckPath": "/healthz",
"httpPort": 6333,
"tcpPorts": {
"QDRANT_GRPC_PORT": {
"title": "Qdrant gRPC API",
"description": "Qdrant gRPC endpoint (container port 6334), used by high-throughput clients such as rig-qdrant. It is authenticated by the same API key as REST. Traffic on this raw TCP port is not TLS-terminated by Cloudron (see the README security section). A Cloudflare-proxied domain cannot forward a raw TCP port; use a DNS-only (grey-cloud) record for the host that serves it.",
"containerPort": 6334,
"defaultValue": 6334,
"portCount": 1
}
},
"addons": {
"localstorage": {},
"proxyAuth": {
"path": "/dashboard",
"supportsBearerAuth": true
},
"scheduler": {
"snapshot": {
"schedule": "0 3 * * *",
"command": "/app/code/snapshot.sh"
}
}
},
"memoryLimit": 2147483648,
"configurePath": "/dashboard",
"optionalSso": true,
"postInstallMessage": "### Qdrant is running and ready\n\nNo setup wizard. Get your API key below, then point your apps or your code at Qdrant whenever you\nwant. The dashboard is optional.\n\n**Get your API key.** Open this app's Terminal (the `>_` button above) and run\n`cat /app/data/.secrets/keys.env`. It prints `QDRANT_ADMIN_API_KEY` (full access — use only for\nwriting/creating) and `QDRANT_READONLY_API_KEY` (read only — prefer this for most connections).\n\n**Open the dashboard (optional).** Go to $CLOUDRON-APP-ORIGIN/dashboard, sign in with your Cloudron\naccount, and paste the admin key into the API-key field.\n\n**Connect another Cloudron app** (n8n, OpenWebUI, AnythingLLM): in that app's own settings, set its\nQdrant URL to $CLOUDRON-APP-ORIGIN and paste a key. See `docs/INTEGRATIONS.md` for per-app recipes.\n\n**Connect your own code:** REST at $CLOUDRON-APP-ORIGIN, or gRPC at the host and port under this\napp's Location settings (for Rust `rig-qdrant`; plain TCP, see the README security section).\n\n**Test from your own computer:** `curl $CLOUDRON-APP-ORIGIN/collections -H \"api-key: PASTE-READONLY-KEY-HERE\"`.\nUse the read-only key for anything that only reads; use the admin key only for apps that create\ncollections or write points.\n\n**Good to know.** JWT and RBAC are on — mint scoped tokens in the dashboard's Access Tokens panel\n(rotating the admin key revokes them all). The memory limit is 2 GB; Qdrant rejects writes near the\nlimit rather than being killed. Full topology, security, and integration recipes are in the README\nand `docs/INTEGRATIONS.md`.\n",
"checklist": {
"apikey": {
"message": "Get your admin API key: open a Terminal for this app (the `>_` button) and run `cat /app/data/.secrets/keys.env`. Paste the admin key into the dashboard and use it for clients; a read-only key is in the same file."
},
"dashboard": {
"message": "Open the dashboard at `/dashboard`, sign in with Cloudron, and paste the admin key into the dashboard's API key field.",
"sso": true
}
},
"tags": [
"database",
"search",
"ai"
],
"mediaLinks": [
"https://raw.githubusercontent.com/OrcVole/qdrant-cloudron/main/screenshots/dashboard.png"
],
"website": "https://github.com/OrcVole/qdrant-cloudron",
"documentationUrl": "https://github.com/OrcVole/qdrant-cloudron",
"contactEmail": "OrcVole@users.noreply.github.com",
"packagerName": "OrcVole",
"packagerUrl": "https://github.com/OrcVole/qdrant-cloudron",
"manifestVersion": 2,
"minBoxVersion": "8.3.0",
"dockerImage": "ghcr.io/orcvole/qdrant-cloudron@sha256:0d136e2d037cef84b124e7d27c4e0e85d0a4bcf5edae7275261a3ce5d905dc51"
},
"creationDate": "Thu, 25 Jun 2026 16:40:30 GMT",
"ts": 1782405630000,
"publishState": "published"
},
"1.0.1": {
"manifest": {
"id": "tech.qdrant.cloudronapp",
"title": "Qdrant",
"author": "OrcVole",
"tagline": "High-performance vector database for AI and search",
"description": "Qdrant is a high-performance, open-source vector database and similarity-search engine written\nin Rust. It stores high-dimensional vectors together with JSON payloads and serves fast\nnearest-neighbour search over REST and gRPC, which makes it a building block for\nretrieval-augmented generation, semantic search, recommendations, and other AI workloads.\n\nThis package runs Qdrant on Cloudron with a secure, two-surface topology on a single domain:\n\n- The web dashboard (served under /dashboard) is placed behind Cloudron login, so only your\n Cloudron users can open the management UI.\n- The REST and gRPC data plane stays in front of Cloudron login and is protected by Qdrant's own\n API key, so programmatic clients and sibling apps authenticate with a key rather than being\n redirected to an interactive sign-in page.\n\nQdrant is insecure by default: its API is open to anyone who can reach it. This package closes\nthat gap. It generates a strong admin key and a separate read-only key on first start, enables\nJWT and role-based access control so you can mint scoped tokens, disables telemetry, refuses\nsnapshot recovery from arbitrary URLs, and configures Qdrant to reject writes rather than be\nkilled when it approaches its memory limit.\n\nAll persistent state lives under the application data directory, so Cloudron's backup covers it.\n\nThis is a community package. It tracks upstream Qdrant releases and keeps the upstream binary\nunmodified. Qdrant and the Qdrant name and logo are trademarks of their respective owner. This\npackage is community-maintained and is not affiliated with or endorsed by the Qdrant project.\n",
"changelog": "# Changelog\n\n[1.0.1]\n- Set minBoxVersion to 9.1.0. The community versions-url install channel requires the iconUrl\n manifest field, and iconUrl requires Cloudron 9.1.0, so there is no 8.3.0-compatible\n versions-url manifest. Boxes below 9.1.0 can still install by building on the server (README).\n- Flatten the post-install Admin notes (Cloudron renders the notes pane as inline markdown, with\n no blockquote cards or callouts) and default the examples to the read-only key.\n\n[1.0.0]\n- Initial release. Packages Qdrant v1.18.2 on cloudron/base:5.0.0.\n- Two-surface topology on a single domain: the dashboard (/dashboard) behind the Cloudron\n proxyAuth addon, the REST and gRPC data plane in front of it and protected by Qdrant's API key.\n- Generates a strong admin key and a separate read-only key on first start; JWT and RBAC enabled.\n- Security hardening: telemetry disabled, snapshot recovery from remote URLs refused.\n- Memory protection: strict-mode resident-memory guard plus on-disk payload.\n- gRPC exposed on a Cloudron TCP port for high-throughput clients such as rig-qdrant.\n- All state under /app/data, covered by Cloudron backup; optional in-container snapshot cron.\n",
"icon": "file://logo.png",
"version": "1.0.1",
"upstreamVersion": "1.18.2",
"healthCheckPath": "/healthz",
"httpPort": 6333,
"tcpPorts": {
"QDRANT_GRPC_PORT": {
"title": "Qdrant gRPC API",
"description": "Qdrant gRPC endpoint (container port 6334), used by high-throughput clients such as rig-qdrant. It is authenticated by the same API key as REST. Traffic on this raw TCP port is not TLS-terminated by Cloudron (see the README security section). A Cloudflare-proxied domain cannot forward a raw TCP port; use a DNS-only (grey-cloud) record for the host that serves it.",
"containerPort": 6334,
"defaultValue": 6334,
"portCount": 1
}
},
"addons": {
"localstorage": {},
"proxyAuth": {
"path": "/dashboard",
"supportsBearerAuth": true
},
"scheduler": {
"snapshot": {
"schedule": "0 3 * * *",
"command": "/app/code/snapshot.sh"
}
}
},
"memoryLimit": 2147483648,
"configurePath": "/dashboard",
"optionalSso": true,
"postInstallMessage": "### Qdrant is running and ready\n\nNo setup wizard. Get your API key below, then point your apps or your code at Qdrant whenever you\nwant. The dashboard is optional.\n\n**Get your API key.** Open this app's Terminal (the `>_` button above) and run\n`cat /app/data/.secrets/keys.env`. It prints `QDRANT_ADMIN_API_KEY` (full access — use only for\nwriting/creating) and `QDRANT_READONLY_API_KEY` (read only — prefer this for most connections).\n\n**Open the dashboard (optional).** Go to $CLOUDRON-APP-ORIGIN/dashboard, sign in with your Cloudron\naccount, and paste the admin key into the API-key field.\n\n**Connect another Cloudron app** (n8n, OpenWebUI, AnythingLLM): in that app's own settings, set its\nQdrant URL to $CLOUDRON-APP-ORIGIN and paste a key. See `docs/INTEGRATIONS.md` for per-app recipes.\n\n**Connect your own code:** REST at $CLOUDRON-APP-ORIGIN, or gRPC at the host and port under this\napp's Location settings (for Rust `rig-qdrant`; plain TCP, see the README security section).\n\n**Test from your own computer:** `curl $CLOUDRON-APP-ORIGIN/collections -H \"api-key: PASTE-READONLY-KEY-HERE\"`.\nUse the read-only key for anything that only reads; use the admin key only for apps that create\ncollections or write points.\n\n**Good to know.** JWT and RBAC are on — mint scoped tokens in the dashboard's Access Tokens panel\n(rotating the admin key revokes them all). The memory limit is 2 GB; Qdrant rejects writes near the\nlimit rather than being killed. Full topology, security, and integration recipes are in the README\nand `docs/INTEGRATIONS.md`.\n",
"checklist": {
"apikey": {
"message": "Get your admin API key: open a Terminal for this app (the `>_` button) and run `cat /app/data/.secrets/keys.env`. Paste the admin key into the dashboard and use it for clients; a read-only key is in the same file."
},
"dashboard": {
"message": "Open the dashboard at `/dashboard`, sign in with Cloudron, and paste the admin key into the dashboard's API key field.",
"sso": true
}
},
"tags": [
"database",
"search",
"ai"
],
"mediaLinks": [
"https://raw.githubusercontent.com/OrcVole/qdrant-cloudron/main/screenshots/dashboard.png"
],
"website": "https://github.com/OrcVole/qdrant-cloudron",
"documentationUrl": "https://github.com/OrcVole/qdrant-cloudron",
"contactEmail": "OrcVole@users.noreply.github.com",
"packagerName": "OrcVole",
"packagerUrl": "https://github.com/OrcVole/qdrant-cloudron",
"manifestVersion": 2,
"minBoxVersion": "9.1.0",
"dockerImage": "ghcr.io/orcvole/qdrant-cloudron@sha256:0d136e2d037cef84b124e7d27c4e0e85d0a4bcf5edae7275261a3ce5d905dc51",
"iconUrl": "https://raw.githubusercontent.com/OrcVole/qdrant-cloudron/main/logo.png"
},
"creationDate": "Thu, 25 Jun 2026 16:59:27 GMT",
"ts": 1782406767000,
"publishState": "published"
},
"1.0.2": {
"manifest": {
"id": "tech.qdrant.cloudronapp",
"title": "Qdrant",
"author": "OrcVole",
"tagline": "High-performance vector database for AI and search",
"description": "1.18.3\n\nQdrant is a high-performance, open-source vector database and similarity-search engine written\nin Rust. It stores high-dimensional vectors together with JSON payloads and serves fast\nnearest-neighbour search over REST and gRPC, which makes it a building block for\nretrieval-augmented generation, semantic search, recommendations, and other AI workloads.\n\nThis package runs Qdrant on Cloudron with a secure, two-surface topology on a single domain:\n\n- The web dashboard (served under /dashboard) is placed behind Cloudron login, so only your\n Cloudron users can open the management UI.\n- The REST and gRPC data plane stays in front of Cloudron login and is protected by Qdrant's own\n API key, so programmatic clients and sibling apps authenticate with a key rather than being\n redirected to an interactive sign-in page.\n\nQdrant is insecure by default: its API is open to anyone who can reach it. This package closes\nthat gap. It generates a strong admin key and a separate read-only key on first start, enables\nJWT and role-based access control so you can mint scoped tokens, disables telemetry, refuses\nsnapshot recovery from arbitrary URLs, and configures Qdrant to reject writes rather than be\nkilled when it approaches its memory limit.\n\nAll persistent state lives under the application data directory, so Cloudron's backup covers it.\n\nThis is a community package. It tracks upstream Qdrant releases and keeps the upstream binary\nunmodified. Qdrant and the Qdrant name and logo are trademarks of their respective owner. This\npackage is community-maintained and is not affiliated with or endorsed by the Qdrant project.\n",
"changelog": "- Bump upstream to Qdrant v1.18.3 (patch; two upstream commits, no auth or storage-format\n changes). Add the `` tag to DESCRIPTION.md so update notifications name the\n upstream version, not just the package version.\n",
"icon": "file://logo.png",
"version": "1.0.2",
"upstreamVersion": "1.18.3",
"healthCheckPath": "/healthz",
"httpPort": 6333,
"tcpPorts": {
"QDRANT_GRPC_PORT": {
"title": "Qdrant gRPC API",
"description": "Qdrant gRPC endpoint (container port 6334), used by high-throughput clients such as rig-qdrant. It is authenticated by the same API key as REST. Traffic on this raw TCP port is not TLS-terminated by Cloudron (see the README security section). A Cloudflare-proxied domain cannot forward a raw TCP port; use a DNS-only (grey-cloud) record for the host that serves it.",
"containerPort": 6334,
"defaultValue": 6334,
"portCount": 1
}
},
"addons": {
"localstorage": {},
"proxyAuth": {
"path": "/dashboard",
"supportsBearerAuth": true
},
"scheduler": {
"snapshot": {
"schedule": "0 3 * * *",
"command": "/app/code/snapshot.sh"
}
}
},
"memoryLimit": 2147483648,
"configurePath": "/dashboard",
"optionalSso": true,
"postInstallMessage": "### Qdrant is running and ready\n\nNo setup wizard. Get your API key below, then point your apps or your code at Qdrant whenever you\nwant. The dashboard is optional.\n\n**Get your API key.** Open this app's Terminal (the `>_` button above) and run\n`cat /app/data/.secrets/keys.env`. It prints `QDRANT_ADMIN_API_KEY` (full access — use only for\nwriting/creating) and `QDRANT_READONLY_API_KEY` (read only — prefer this for most connections).\n\n**Open the dashboard (optional).** Go to $CLOUDRON-APP-ORIGIN/dashboard, sign in with your Cloudron\naccount, and paste the admin key into the API-key field.\n\n**Connect another Cloudron app** (n8n, OpenWebUI, AnythingLLM): in that app's own settings, set its\nQdrant URL to $CLOUDRON-APP-ORIGIN and paste a key. See `docs/INTEGRATIONS.md` for per-app recipes.\n\n**Connect your own code:** REST at $CLOUDRON-APP-ORIGIN, or gRPC at the host and port under this\napp's Location settings (for Rust `rig-qdrant`; plain TCP, see the README security section).\n\n**Test from your own computer:** `curl $CLOUDRON-APP-ORIGIN/collections -H \"api-key: PASTE-READONLY-KEY-HERE\"`.\nUse the read-only key for anything that only reads; use the admin key only for apps that create\ncollections or write points.\n\n**Good to know.** JWT and RBAC are on — mint scoped tokens in the dashboard's Access Tokens panel\n(rotating the admin key revokes them all). The memory limit is 2 GB; Qdrant rejects writes near the\nlimit rather than being killed. Full topology, security, and integration recipes are in the README\nand `docs/INTEGRATIONS.md`.\n",
"checklist": {
"apikey": {
"message": "Get your admin API key: open a Terminal for this app (the `>_` button) and run `cat /app/data/.secrets/keys.env`. Paste the admin key into the dashboard and use it for clients; a read-only key is in the same file."
},
"dashboard": {
"message": "Open the dashboard at `/dashboard`, sign in with Cloudron, and paste the admin key into the dashboard's API key field.",
"sso": true
}
},
"tags": [
"database",
"search",
"ai"
],
"mediaLinks": [
"https://raw.githubusercontent.com/OrcVole/qdrant-cloudron/main/screenshots/dashboard.png"
],
"website": "https://github.com/OrcVole/qdrant-cloudron",
"documentationUrl": "https://github.com/OrcVole/qdrant-cloudron",
"contactEmail": "OrcVole@users.noreply.github.com",
"packagerName": "OrcVole",
"packagerUrl": "https://github.com/OrcVole/qdrant-cloudron",
"manifestVersion": 2,
"minBoxVersion": "9.1.0",
"dockerImage": "ghcr.io/orcvole/qdrant-cloudron@sha256:9b2bcad2df687ebb7791edb6c411b647f3d7eef5caf2ced7fcaf2636e0023fe4",
"iconUrl": "https://raw.githubusercontent.com/OrcVole/qdrant-cloudron/main/logo.png"
},
"creationDate": "Sun, 02 Aug 2026 17:21:53 GMT",
"ts": 1785691313000,
"publishState": "published"
}
}
}