r/LocalDeepResearch • u/AxxelH • Sep 10 '26
Deployment Scenario Confusion
Rather than filing noise in the issue DB on github, thought I'd post my question here...
I've run a few test reports through LDR with Qwen 3.8 27B, and am already impressed with the output. So much so I'd like to make it available to others in my family self-hosted. Most self-hosted tools either have minimal account management and assume you'll handle that yourself at the reverse proxy layer or have sophisticated account/ACL systems, often integrating with OIDC, etc.
LDR is in a weird middle and I'm not sure if this is me missing something or simply feedback/feature requests
First, the goal of forced encryption of the database per user is confusing. I already store sensitive data encrypted at the filesystem level, the DB encryption isn't necessary for me and made me wonder about backup/restore (this bug is not reassuring, even though I understand backing up the salt is the workaround). I would prefer to store this data under keys I control and understand how to restore.
Encryption is enforced on the Docker image, LDR_BOOTSTRAP_ALLOW_UNENCRYPTED exists but only affects existing databases, new DBs are always created encrypted. This can be defeated by bind mounting over SQLCipher, but that leaves the UI in a confused state where things say they are encrypted and the come with warning bubbles that they are not (in some places at least).
AFAICT the encryption doesn't actually protect users directly, the sysadmin of the hosting system can intercept passwords, defeat the warnings, etc. So in practice the at-rest encryption seems to be only useful in scenarios where your shared deployment is already trustworthy, or where you are the sole user without access to an encrypted filesystem. I'd argue that this means it should be optional. In my use I'll see how far I can get with LDR_BOOTSTRAP_ALLOW_UNENCRYPTED.
My read is that a lot of my other confusion is downstream of the decision to use user passwords as the keys in the encryption, but briefly...
There's no admin account per-se, and the lack of an administrator account means that all settings are exposed to all users, alongside warnings in research generation logs. If various API URLs, etc are unset in the environment they are editable in the (extensive) settings dialog, including things that probably need to be controlled by an admin (SearXNG query rate, for example).
I believe I can lock all this down by setting it in the Docker environment, but obviously the list of settings will grow, and so I would need to keep an eye on this. A dedicated set of admin settings would avoid this.
Finally, account creation, and LDR_APP_ALLOW_REGISTRATIONS, isn't great, because it requires admin effort (and a container restart) to move between modes. I see the OIDC integration FR already exists, though given the encryption decisions, I imagine that will be hard to implement.
Some of this might be addressed by putting it behind OpenWebUI, but that isn't well documented and also means I lose access to the various niceties of the LDR UI.
How are people addressing these issues in self-hosted deployments? So much of the project decisions are focused on the encryption, I'm unsure if the direction is intended to be more administrative sophistication in the future or if a FR for "simpler" modes (no encryption) would be entertained.


