kaneo and postgres.
Kaneo will not start
postgres, not localhost.
Changing POSTGRES_PASSWORD in .env does not change the password of an already initialized PostgreSQL user. Update the database credential deliberately and keep the application configuration in sync. Do not delete the volume to resolve a password mismatch.
The page opens, but requests or sign-in fail
CheckKANEO_CLIENT_URL against the URL in your browser. In the bundled deployment, leave KANEO_API_URL unset so it becomes the client URL plus /api.
A browser on another computer cannot use your server’s localhost URL. Use the public hostname and HTTPS, then recreate the container:
401 usually calls for checking authentication; a 403 calls for checking workspace access or the required permission.
Changes only appear after refreshing
Check that the reverse proxy forwards WebSocket upgrades. Use the Nginx example and check for failed WebSocket requests in browser developer tools. With multiple API instances, configure Redis for shared realtime delivery. A single API instance does not need it.Uploads fail
Check these in order:- Configuration: the bucket exists and the
S3_*values are set on the API. - Reachability: the browser and API both resolve and reach
S3_ENDPOINT. Docker-only names do not work for browser uploads. - HTTPS: an HTTPS Kaneo page must not upload to an HTTP storage endpoint.
- CORS: storage allows the exact Kaneo origin, PUT, and the requested headers. For Silo, a bucket-specific policy overrides global CORS.
- Permissions: the credential can put, read, and delete objects in the bucket.
- Limits: the file fits Kaneo’s upload limit and the proxy’s body limit.
- Signature: the proxy preserves the host, path, query string, and signed headers. Check the storage server’s clock too.
An invitation email does not arrive
Check the pending invitation in Members. Copy its link and share it directly if email is not configured. If SMTP is configured but delivery fails, check the API logs and your mail provider’s delivery logs. For SMTP on port 587, useSMTP_SECURE=false with STARTTLS. For implicit TLS, commonly on port 465, use SMTP_SECURE=true. Follow your provider’s settings and the SMTP reference.
Someone cannot see or change a project
Check the selected workspace, their membership, and their role. Being able to read a task does not imply permission to assign or delete it. See Members and roles.Ask for help
Open a GitHub issue with the Kaneo version, deployment method, steps to reproduce, expected result, and the relevant error. Include a screenshot when it helps explain the problem. Remove passwords, tokens, connection strings, invitation links, and private task data from logs or screenshots before sharing them. Do not post your.env file.