Flowise can be self-hosted with npm or Docker, but its current project status should shape any deployment decision: the official GitHub repository was archived on August 13, 2026, and Flowise’s security page says the product is being sunset and is no longer accepting new security reports. For a test instance, the documented Docker Compose route is short; for a VPS or other internet-accessible system, plan persistence, credential-key recovery, and restricted access before starting.
What Flowise does
Flowise describes itself as an open-source platform for building AI agents and LLM workflows through visual tools. Its documentation identifies three builders:
| Builder | Documented use |
|---|---|
| Assistant | A beginner-friendly way to create an assistant that follows instructions, uses tools, and retrieves information from uploaded files. |
| Chatflow | Chatbots, single-agent systems, and simpler LLM flows, including options such as Graph RAG, reranking, and retrieval. |
| Agentflow | Multi-agent systems and more complex workflow orchestration. |
Flowise also reports support for more than 100 sources, tools, vector databases, and memory integrations; that is a vendor-stated capability count, and the documentation checked does not give it a publication year. Other documented areas include custom code, branching, tracing, evaluations, human review, APIs, a CLI and SDK, embedded chat, workspaces, and self-hosted or air-gapped deployments.
Choose a deployment route
The official getting-started documentation describes npm installation and Docker deployment. The project also lists cloud infrastructure and hosted application platforms. These are deployment options, not evidence that one provider is faster, cheaper, or better than another: the official materials checked do not provide current comparative pricing or performance measurements.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
- This Certified Refurbished product is tested and certified to look and work like new. The refurbishing process includes functionality testing, basic cleaning, inspection, and repackaging. The product ships with all relevant accessories, a minimum 90-day warranty, and may arrive in a generic box. Only select sellers who maintain a high performance bar may offer Certified Refurbished products on Amazon.com
- Intel Quad-core i5-6500T up to 3.1G,16G DDR4 memory（2 slots，supports up to 32GB）,240G SSD
- Includes USB Keyboard（English Keyboard & Mouse Included)
- I/O ports：Front：2 USB 3.0 ，microphone，headphone ，USB Type-C port Rear：4USB 3.0 ，VGA DP port，RJ-45
- Operating System：Win10Pro64bit
| Route | What to weigh |
|---|---|
| npm or local Docker | Useful for trying the documented setup on a machine you control. A local quick start does not by itself provide a production security or recovery plan. |
| Cloud VM or VPS | Offers control over the environment, but you are responsible for configuring and operating the instance. Flowise says established cloud providers require more technical expertise while allowing greater flexibility and control. |
| Managed deployment platform | May reduce some infrastructure administration, depending on the provider and configuration. Confirm how it handles persistent storage, secrets, backups, access control, and updates. |
Flowise’s documentation names AWS, Azure, DigitalOcean, Google Cloud Platform, Alibaba Cloud, Railway, Northflank, Render, Hugging Face Spaces, Elestio, Sealos, and RepoCloud. Its deployment materials do not establish a current ranking among them. Decide where the database, logs, encryption key, and uploaded or blob data will live, and who will restore them if the instance is lost.
Start Flowise with the documented Docker Compose sequence
The following is Flowise’s documented quick-start sequence, not a deployment test. Check the instructions and files for the particular release or image you intend to use. Because the repository is archived, do not assume these instructions will receive updates.
-
Clone the official Flowise repository at the release or version you intend to run. The documentation’s sequence begins by cloning the repository; use its official repository page to obtain the clone address rather than copying an unverified address.
Rank #2
Beelink SER3 Mini PC AMD Ryzen 3 3200U (up to 3.5GHz), 8GB DDR4 480GB PCIE3.0 SSD Mini Computer, Radeon Vega 3 Graphics,1000Mbps LAN, Dual HDMI 4K Display Home-Office PC- 【SER3 Next-Gen Light Office Mini PC】Beelink Mini pc New SER3 AMD Ryzen 3 3200U Processor (2.6-3.5GHz 2C/4T),with Radeon Vega 3 Graphics 3core 1200 MHz, Light office, 4K multimedia playback, virtual machine, NAS, meeting all your daily needs, Beelink mini pc is only 4.88 x 4.44 x 1.65 inches and takes up only 1/40
- 【8GB DDR4 RAM+ 480GB PCIe3.0 SSD】SER3 Beelink mini pc comes with 8GB SODIMM DDR4 memory, dual-channel memory expansion slots supports up to 32GB (2x16GB) expansion, you can also replace the 480GB SSD up to 2TB (excluded) M.2 PCIE3.0 x4(2280) slot (Incompatible with SATA3 SSDs), or add a 2.5inch 7mm HDD(max 2TB, excluded) to expand the storage. Large capacity brings quicker load times across your entire catalogue of apps and programs
- 【USB3.2 + WiFi 5 + BT 5.0】Beelink AMD Ryzen 3 3200U Mini Desktop Computer is equipped with rich interfaces: USB3.2x4, HDMI x2, 1000M LANx1. The transmission rate of USB3.2 is up to 10Gbps, 21 times faster than USB2.0. WiFi 5 (802.11ac) Bluetooth5.0 lower latency , more stable and efficient to connect to multiple wireless devices such as projector, printer, monitor, speakers and etc
- 【Improve Work Efficiency】SER3 Dual HDMI prots allow you to expand your viewing area to enjoy better experience and multi-task easily, i.e. web browsing, design, 4K videos playback, online class, perfectly valid as a multimedia center to use KODI, IPTV or use as a digital signage and brings true-to-life 4K@60Hz visual feat to the audiance
- 【Why Beelink Mini PC】Beelink SER3 VESA mount can hide the micro pc behind a monitor or HDTV like an all-in-one pc, free you from messy desktop, Cooling system Large fan and dual heat conduction tube,make heat dissipation more efficient,3200U Mini desktop pc also supports Wake On LAN, RTC Wake, Auto Power On, a great to use as a server for media (Plex or FTP)
-
Change into the repository’s
dockerdirectory. -
Copy
.env.exampleto.envin that directory. -
Start the Compose services with
docker compose up -d.Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
Open
http://localhost:3000on the machine running the deployment. For a remote VPS, localhost refers to the server itself; it is not a reason to expose the application port publicly.
The official documentation also describes building and running a Docker image and an npm installation route, but the exact commands and prerequisites are release-specific. Consult the instructions for the version you choose instead of mixing commands or configuration from different releases.
Rank #3
- Powerful Performance: Intel Core i5 Hexa Core processor for reliable multitasking and smooth computing.
- Fast & Efficient: 16GB DDR4 RAM and 250GB SSD for quick startup and performance.
- Windows 11 Pro: Modern operating system with professional-grade tools and enhanced security.
- Compact Design: Space-saving mini chassis fits neatly on or under your desk.
- Renewed Quality: Professionally tested and renewed to perform like new; may show minor cosmetic wear.
Plan Docker persistence and credential recovery
The Docker README identifies these environment variables for persistent locations:
DATABASE_PATHfor the databaseLOG_PATHfor logsSECRETKEY_PATHfor the credential-encryption keyBLOB_STORAGE_PATHfor blob storage
The README says the container runs as the non-root node user with UID 1000. Host directories mounted into the container must be writable by that user; on Linux, the README notes that changing ownership to UID/GID 1000 may be necessary. A container that starts but cannot write to its mounted paths will not have the persistence you intended.
Flowise’s environment documentation says third-party credentials, such as model-provider or vector-database keys, are encrypted using an encryption key. By default, Flowise generates a random key and stores it at a configured file path; the documentation also describes AWS Secrets Manager as an optional key-storage mechanism. Changing the key or its path can make saved credentials impossible to decrypt. Treat the key as a recovery-critical secret, not as a disposable container file.
- Choose persistent locations for all four paths before relying on the instance.
- Make mounted directories writable by the container’s UID 1000.
- Back up application data and the encryption key, keeping backups outside the instance.
- Document and test how a restore will recover both the data and the key needed to decrypt credentials.
These backup and restore steps are operational recommendations based on Flowise’s documented persistence and key behavior; the documentation does not say that Flowise performs them automatically.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Configure authentication and security deliberately
Flowise’s authorization guide describes email-and-password authentication from version 3.0.1 onward, using JWT access and refresh tokens. It recommends setting custom, strong JWT and token secrets rather than relying on defaults, which it warns could make token forgery and user impersonation more likely. Authentication behavior is version-sensitive, so follow the guide for the specific release you run. The guide also marks older username/password application-level authorization as deprecated.
For production email configuration, the guide recommends SMTP_SECURE=true and ALLOW_UNAUTHORIZED_CERTS=false. The environment-variable documentation warns that setting CUSTOM_MCP_SECURITY_CHECK to disabled permits arbitrary command execution and creates significant production risk. It says HTTP_SECURITY_CHECK and PATH_TRAVERSAL_SAFETY are enabled by default and describes an HTTP deny list; do not disable these protections casually.
Recommended Free Tools
Best Value
- 【Hybrid 2-Bay Storage: NAS & Mini PC in One】Beelink ME Pro features two 3.5"/2.5" SATA HDD slots and three M.2 PCIe3.0 SSD slots (pre-installed with a 1TB system drive) supporting a massive 72TB expansion. it’s the ultimate solution for building a massive private cloud, automated backups, or a centralized media library
- 【Next-Gen Intel N150 & 16GB LPDDR5】 Powered by the Intel N150 processor (up to 3.6GHz, max 25W TDP) and 16GB LPDDR5 4800MT/s RAM, this mini pc delivers efficient multitasking and smooth performance for home office, virtualization, and server tasks with lower power consumption
- 【5GbE + 2.5GbE High-Speed Dual Networking】 Equipped with 5G & 2.5G Ethernet ports, this Dual LAN Mini PC supports network aggregation and high-speed data transfer. Ideal for stable, lag-free access to your files, high-speed downloading, and advanced networking configurations like soft routing
- 【Swappable Modular Motherboard】The innovative DlY drawer-style design supports easy motherboard upgrades, compatible with Intel N-series, Intel 12th/13th/14th/15th Gen, AMD FP8 series, and ARM architectures
- 【Easy Dust Cleaning】Simply slide out the motherboard for quick maintenance
A maintainer advisory identifies CVE-2025-59528 as a critical CustomMCP code-injection issue affecting version 3.0.5 and lists 3.0.6 as the patched version for that specific issue. That historical fix does not establish that later versions have no other vulnerabilities. Check the official, version-specific security advisory history and restrict access to the UI and API with network controls appropriate to your environment. A setup recipe alone is not evidence of a secure public-facing deployment.
Account for Flowise’s archived and sunset status
As checked on October 4, 2026, Flowise’s official GitHub repository was archived on August 13, 2026. Its security page says the product is being sunset and that new security reports are not being accepted. This changes the maintenance risk for any new deployment: do not assume active security fixes, ongoing support, or future compatibility updates. The available information does not establish a recommended successor.
For an experiment isolated from sensitive data, that risk may be acceptable if you understand the limitations. For an internet-accessible service or a workload that handles valuable credentials or user data, weigh the sunset status against the need for continued security maintenance before choosing Flowise. If you proceed, select a specific version, review its advisories, keep the instance private or tightly controlled, and preserve a recovery path for its data and secrets.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
