Deploy Lissi Agent using Docker-Compose
Prerequisites
Access to the Docker Images and Configuration Files
To setup Lissi Agent you require:
Access to the Docker images (is granted via a personal access token)
The Lissi Agent configuration files
Setup a VM
Setup a VM preferably running Ubuntu 20.04 (LTS) with 2 CPUs and 4 GB RAM
Allow HTTP and HTTPS connections on the ports 80 and 443
Install docker: https://docs.docker.com/engine/install/ubuntu/
Install docker-compose: https://docs.docker.com/compose/install/
Login to the ACR through docker to have access to the Lissi Agent container images
sudo docker login -u [TOKEN_NAME] -p [TOKEN] milissi.azurecr.io
BASH
Optional but recommended is to set the current user with privileged access to docker. Avoiding prefacing docker commands with sudo
https://docs.docker.com/engine/install/linux-postinstall/
Register a Domain Name
Register a domain name that links to the VM’s public IP address. The UI, the controller and the user management system will respectively be accessible from this domain at https://YOUR.DOMAIN/
, https://YOUR.DOMAIN/ctrl/
and https://YOUR.DOMAIN/auth
.
Setup
1. Configuration Files
Upload the configuration files to the server, unzip them, and store them into the folder
~/app
Ensure that the
manage.sh
scripts in the folderskeycloak
,client
,server
are executablesudo chmod 744 ~/app/keycloak/manage.sh sudo chmod 744 ~/app/server/manage.sh sudo chmod 744 ~/app/client/manage.sh
BASHEnsure that the
~/app/client/letsencrypt/renewCert.sh
script is executable (chmod 744)sudo chmod 744 ~/app/client/letsencrypt/renewCert.sh
BASH
2. .profile (Environment variables)
Move the file
.profile
to~/.profile
mv .profile ~/.profile
BASHEdit the values for the following variables - both will be used to create a Let's Encrypt Certificate
DOMAIN_NAME
EMAIL
If desired the pre-filled
KEYCLOAK_PASSWORD
andAGENT_LABEL
can be modified. The password will be necessary to connect to the user management system underhttps://YOUR.DOMAIN/auth
. The label will be displayed on the Lissi Agent UI and in SSI Wallets when connecting to other agents.Source the
.profile
to apply the changessource ~/.profile
BASH
3. Installation
Run the script `install-lissi.sh`
cd ~/app ./install-lissi.sh
BASHOpen the domain of your agent and log in using username
lissi
and passwordlissi
On your first login, you are prompted to change the password to something secure