diff --git a/dashboard/src/components/AppInstallDialog.vue b/dashboard/src/components/AppInstallDialog.vue
index 3362ba8f7..fd312cd90 100644
--- a/dashboard/src/components/AppInstallDialog.vue
+++ b/dashboard/src/components/AppInstallDialog.vue
@@ -25,13 +25,17 @@
 
               <FormGroup>
                 <label for="location">{{ $t('appstore.installDialog.location') }}</label>
-                <TextInput id="location" v-model="location" />
+                <div>
+                  <TextInput id="location" v-model="location" />
+                  <Dropdown v-model="domain" :options="domains" option-label="domain" option-key="domain" />
+                </div>
               </FormGroup>
 
               <AccessControl v-model="accessRestriction"/>
+
+              <Button @click="submit" icon="fa-solid fa-circle-down" :disabled="!formValid" :loading="busy">Install {{ manifest.title }}</Button>
             </fieldset>
           </form>
-          <Button @click="submit" icon="fa-solid fa-circle-down">Install {{ manifest.title }}</Button>
         </div>
       </Transition>
     </div>
@@ -40,38 +44,73 @@
 
 <script setup>
 
-import { ref, computed, useTemplateRef } from 'vue';
+import { ref, computed, useTemplateRef, onMounted } from 'vue';
 import { marked } from 'marked';
-import { Button, Dialog, FormGroup, TextInput } from 'pankow';
+import { Button, Dialog, Dropdown, FormGroup, TextInput } from 'pankow';
 import { prettyDate, prettyFileSize } from 'pankow/utils';
 import AccessControl from './AccessControl.vue';
+import DomainsModel from '../models/DomainsModel.js';
+import AppsModel from '../models/AppsModel.js';
+
+const API_ORIGIN = import.meta.env.VITE_API_ORIGIN ? import.meta.env.VITE_API_ORIGIN : window.location.origin;
 
 const STEP = Object.freeze({
   DETAILS: Symbol('details'),
   INSTALL: Symbol('install'),
 });
 
+const domainsModel = DomainsModel.create(API_ORIGIN, localStorage.token);
+const appsModel = AppsModel.create(API_ORIGIN, localStorage.token);
+
 // reactive
+const busy = ref(false);
 const app = ref({});
 const manifest = ref({});
 const step = ref(STEP.DETAILS);
 const dialog = useTemplateRef('dialogHandle');
 const description = computed(() => marked.parse(manifest.value.description || ''));
+const domains = ref([]);
 const formValid = computed(() => {
+  if (!domain.value) return false;
   return true;
 });
 
 // form data
 const location = ref('');
 const accessRestriction = ref(null);
+const domain = ref('');
 
-function submit() {
+async function submit() {
+  const config = {
+    subdomain: location.value,
+    domain: domain.value,
+    accessRestriction: accessRestriction.value,
+  };
 
+  if (manifest.value.optionalSso) config.sso =!!accessRestriction.value;
+
+  busy.value = true;
+  const error = await appsModel.install(manifest.value, config);
+  busy.value = false;
+
+  if (!error) {
+    dialog.value.close();
+    return window.location.href = '#/apps';
+  }
+
+  console.error('Failed to install:', error);
 }
 
+onMounted(async () => {
+  domains.value = await domainsModel.list();
+
+  // TODO pre-select the adminDomain
+  domain.value = domains.value[0].domain;
+});
+
 defineExpose({
   open(a) {
-    step.value = STEP.INSTALL;
+    step.value = STEP.DETAILS;
     app.value = a;
     manifest.value = a.manifest;
 
diff --git a/dashboard/src/models/AppsModel.js b/dashboard/src/models/AppsModel.js
index c1d8a747a..8965a191e 100644
--- a/dashboard/src/models/AppsModel.js
+++ b/dashboard/src/models/AppsModel.js
@@ -84,6 +84,36 @@ function create(origin, accessToken, id) {
   return {
     name: 'AppsModel',
     getTask,
+    async install(manifest, config) {
+      const data = {
+        appStoreId: manifest.id + '@' + manifest.version,
+        subdomain: config.subdomain,
+        domain: config.domain,
+        secondaryDomains: config.secondaryDomains,
+        ports: config.ports,
+        accessRestriction: config.accessRestriction,
+        cert: config.cert,
+        key: config.key,
+        sso: config.sso,
+        overwriteDns: config.overwriteDns,
+        upstreamUri: config.upstreamUri,
+        backupId: config.backupId // when restoring from archive
+      };
+
+      let error, result;
+      try {
+        result = await fetcher.post(`${origin}/api/v1/apps`, data, { access_token: accessToken });
+      } catch (e) {
+        error = e;
+      }
+
+      if (error || result.status !== 202) {
+        console.error('Failed to install app.', error || result.status);
+        return error || result.body;
+      }
+
+      return '';
+    },
     async list() {
       let error, result;
       try {