What the installer does and post-install checklist

This article explains exactly what the one-command installer does, then gives a post-install checklist.

What the installer does

1. Checks prerequisites — confirms it is running as root and that Docker, the Compose v2 plugin, the Docker daemon, and openssl are all available. It checks but does not install them.
2. Collects inputs — public URL, super-admin email, and license key (from env or prompts).
3. Authenticates the pull — logs in to the registry with the license key, then pulls the pinned application image. It logs out afterward so registry credentials are not cached.
4. Writes config — creates the install directory (mode 700), generates the app secret and database passwords with openssl, and writes .env.docker (mode 600) and docker-compose.yml.
5. Starts the stack — runs docker compose up -d for the app and MariaDB. On first boot the app runs database migrations (alembic upgrade head) before serving.
6. Waits — polls the local port until the app responds, then prints next steps.

Post-install checklist

• Confirm both containers are running: cd /opt/summitpsa && docker compose ps.
• If the app is not responding yet, check logs: docker compose logs app.
• Verify the app answers locally on 127.0.0.1:8001.
• Put a reverse proxy in front that terminates TLS and forwards to the local port.
• Open your public URL and complete the setup wizard to create the super admin.

The local port must not be reachable from the internet before setup — the wizard creates the first admin account.