AutoDM

Docs · Deploy · Panduan Bahasa Indonesia · Discussions

When someone comments a keyword like GUIDE on your post or reel, AutoDM replies under the comment and sends them a private DM with your link, using the official Instagram API. It is an open-source alternative to ManyChat-style "comment to DM" tools: no per-contact pricing, you host it yourself (free on Vercel + Supabase, or Docker), your data stays in your own database, and it can plug into n8n.

Renamed from auto-reply-ig. The project is now AutoDM (repository ilramdhan/auto-dm). Old GitHub links and forks redirect automatically. Docker users: switch the image to ghcr.io/ilramdhan/auto-dm; the old ghcr.io/ilramdhan/auto-reply-ig image no longer receives updates. Nothing else changes: your database, settings, API keys and logins keep working.

Features

• Multi-post campaigns: a campaign targets one or more posts/reels (up to 20, e.g. a reel and its boosted ad version), or "all posts". Comments from an ad that aren't covered show up on Skipped comments with Add this post to campaign.
• Unlimited keywords per post, each rule with its own replies (match modes: word, exact, contains, or any comment; case, accent and emoji safe).
• Random public-reply variants so your replies don't look copy-pasted.
• Personalised DMs with {username} and {keyword}, plus an optional link button.
• Follow gate (optional, per rule): the link is sent only after the commenter taps "I've followed" and is confirmed to follow you.
• Once per user per rule, and loop protection (your own replies are ignored).
• Live activity log with status, errors and skip reasons for every comment.
• Skipped comments + manual send: see why a comment wasn't answered (including keyword hits on a different post, e.g. the ad version of a boosted reel) and send a rule's reply + DM by hand within Instagram's 7-day window, once per comment.
• Check for missed comments: re-read the last 7 days of a campaign post's comments from Instagram and list any whose webhook never arrived (nothing is sent automatically).
• Kill switch to pause all sending instantly.
• Encrypted secrets (AES-256-GCM): tokens and the Meta app secret are never stored in plain text.
• Automatic token refresh (daily cron), so the 60-day Instagram token never expires on you.
• Optional n8n relay if you want to extend flows with your own nodes.
• Accessible, responsive UI with dark mode (ACCESSIBILITY.md).

Screenshots

All screenshots use fake demo data (scripts/demo/seed.ts).

Public website

Every deployment also serves a small public website, so visitors don't need this repository to understand the project: Home (/), Features (/features), a plain-language Setup guide (/setup), Pricing (/pricing, free and open source plus honest hosting costs) and FAQ (/faq), next to the Privacy, Terms and Data deletion pages Meta requires. The pages are listed in sitemap.xml and make no external requests.

Deploy in 5 minutes

You will need a free Vercel, Supabase and GitHub account.

1. Click the button, set APP_SECRET (e.g. openssl rand -base64 48), and add the Supabase integration when asked. It injects the database variables automatically. (⚠ verify: the stores integration/product slugs for Supabase may change; if the Supabase step doesn't appear, add the integration from the Vercel project's Storage tab, or paste DATABASE_URL manually. See deployment.md.)
2. Vercel builds the app; database migrations run automatically during the build.
3. Open your new URL and log in with admin / changeme123. You are forced to change the password immediately.
4. Go to Settings → Instagram and follow the Meta setup guide (about 15 minutes).
5. Create your first campaign, comment the keyword from another account, and watch the Activity page.

Or self-host with Docker

git clone https://github.com/ilramdhan/auto-dm.git && cd auto-dm
cp .env.example .env     # set APP_SECRET, CRON_SECRET (and APP_URL for your public HTTPS URL)
docker compose up -d     # pulls ghcr.io/ilramdhan/auto-dm, http://localhost:3000

Meta webhooks need HTTPS, so put a reverse proxy in front. See docs/docker.md. Versions and release process: docs/releasing.md.

Local development

git clone https://github.com/ilramdhan/auto-dm.git && cd auto-dm
corepack enable && pnpm install          # Node 22 recommended (see .nvmrc)

# Postgres 15+: Supabase CLI (`supabase start`) or Docker:
docker run -d --name ig-pg -e POSTGRES_PASSWORD=postgres -p 5432:5432 postgres:16

cp .env.example .env.local               # set DATABASE_URL and APP_SECRET
# DATABASE_URL=postgres://postgres:postgres@localhost:5432/postgres
pnpm db:migrate
pnpm dev                                 # http://localhost:3000

Meta can't reach localhost; use a tunnel (cloudflared/ngrok) to test webhooks. Details: docs/development.md.

How it works

sequenceDiagram
  participant U as Commenter
  participant IG as Instagram / Meta
  participant N as n8n (optional)
  participant A as AutoDM
  participant DB as Postgres
  U->>IG: Comments "GUIDE" on your post
  IG->>A: POST /api/webhooks/instagram (signed)
  Note over IG,N: or Meta -> n8n -> POST /api/v1/n8n/events
  A->>A: Verify X-Hub-Signature-256, return 200
  A->>DB: Insert delivery (comment_id UNIQUE = idempotent)
  A->>A: Match campaign + rule + keyword
  A->>IG: Reply publicly (random variant)
  A->>IG: Private Reply DM (once per comment)
  A->>DB: Update delivery status (Activity log)

More in docs/architecture.md.

Configuration

Only two variables are required; everything Instagram-related is set in the UI.

Variable	Required	Description
DATABASE_URL	yes*	Postgres URL (Supabase transaction pooler, port 6543). *Falls back to POSTGRES_URL from the Vercel integration.
DATABASE_URL_UNPOOLED	no	Direct connection (5432) used for migrations.
APP_SECRET	yes	32+ random chars. Signs sessions and derives the encryption key. Changing it invalidates stored secrets.
APP_URL	no	Public URL. Defaults to the Vercel production domain.
ADMIN_DEFAULT_USERNAME / ADMIN_DEFAULT_PASSWORD	no	First-run login (admin / changeme123); must be changed on first login.
CRON_SECRET	no	Protects /api/cron/*; Vercel sends it automatically.

Full reference: docs/configuration.md.

FAQ

Is it really free and unlimited? The software has no fees or contact limits. Limits come from Meta (rate limits, one private reply per comment within 7 days) and your hosting tier. See Is it free & unlimited?.

Do I need a Facebook Page? No. It uses Instagram API with Instagram Login and a professional (Business or Creator) account.

Do I need Meta App Review? For your own account, Standard Access is the intended path. Whether public comments reach the webhook in Live mode without Advanced Access is not confirmed by Meta's docs, so test it. See meta-setup.md.

Can I send a second DM? Not with Private Replies: one per comment, within 7 days. Follow-ups are only possible after the user replies (24-hour window).

Will Instagram ban me? Automating replies to people who explicitly commented a keyword is a supported use case, but spammy behaviour can be throttled. Use varied replies and relevant messages.

Is my data safe? Secrets are encrypted at rest, RLS is enabled on every table, webhooks are signature-verified. See SECURITY.md.

Can I use n8n? Yes, optionally: docs/n8n.md.

It doesn't fire! Open Settings → Instagram → Webhook diagnostics, then see My test comment did nothing. Test from a second account: your own comments are ignored.

Roadmap ideas

Multi-account support, follower gate ("follow to get the link"), analytics and CSV export, internationalisation (i18n), scheduled campaigns UI improvements, story-reply triggers, webhook for outgoing events. Ideas and PRs welcome.

🇮🇩 Ringkasan

AutoDM adalah aplikasi gratis dan open source untuk membalas komentar Instagram secara otomatis: ketika seseorang berkomentar dengan kata kunci tertentu, aplikasi membalas di kolom komentar dan mengirim DM. Tanpa biaya per kontak, bisa dipasang gratis di Vercel + Supabase.

• Panduan lengkap berbahasa Indonesia (mulai dari sini): docs/panduan-lengkap-id.md — Supabase, Vercel, Meta app, webhook, n8n, dan semua key yang dibutuhkan (tidak perlu API key AI).
• Deploy: docs/deployment.md.
• Setup aplikasi Meta/Instagram: docs/meta-setup.md.
• Masalah umum: docs/troubleshooting.md.
• Catatan: Meta membatasi 1 balasan pribadi per komentar dalam 7 hari.

Contributing

Contributions are welcome. Read CONTRIBUTING.md and the Code of Conduct. Security issues: SECURITY.md. Questions: SUPPORT.md.

License

MIT © 2026 Ilham Ramadhan (@ilramdhan, ilramdhan.dev, Instagram @ilramadhan_).

Contributors

Want to see your name here? Read CONTRIBUTING.md and open a pull request. The full list is on the contributors graph.

Acknowledgements

Next.js, shadcn/ui, Drizzle ORM, Supabase, Vercel, n8n, and Meta's Instagram Platform.