Install and maintain

For administrators who deploy, upgrade, back up, and secure oc8.

This section is not about using the product day to day — that lives in User documentation. Integrations (M365, Google, …) live under User → Integrations.

Deploy and operate

Topic	Guide
Docker Compose reference stack	Deploy
Production caveats	Deploy — deliberate limits
Scope and limitations	SCOPE_AND_LIMITATIONS
Backup and restore	BACKUP_RESTORE
Pilot backup runbook	PILOT_BACKUP_RESTORE
Audit / evidence export	Audit settings in the UI + Postgres backup

Quick deploy

./scripts/quickstart.sh
# or:
cp .env.example .env   # set secrets — see DEPLOY.md
docker compose up -d --build

Operators: follow Quickstart for first login, model, agent.

Upgrades

git pull
docker compose up -d --build

The migrate service applies schema changes before app containers restart.

Monitoring

docker compose logs -f backend worker scheduler
curl -s http://localhost/health   # adjust port to your .env

Security checklist

• Never expose OC8_ENV=dev / dev-login on a public host
• Set OC8_ENV=prod and configure real login before network exposure
• Rotate OC8_JWT_SECRET, OC8_SECRET_KEK, and database passwords for production
• Treat Docker socket access on backend/worker as host root-equivalent
• SECURITY.md

Related

• User docs
• UI guide