ArtiFerrisInstallation

Installation

ArtiFerris fits in one container image: the server, both registries, the interface and Trivy. It needs PostgreSQL and a volume. Three ways to install it: Docker Compose, the Helm chart on Kubernetes, or from source.

Docker Compose

Start the stack with Docker Compose

git clone https://github.com/Masmarino/ArtiFerris.git
cd ArtiFerris
cp .env.example .env
# set POSTGRES_PASSWORD, JWT_SECRET, SECRETS_ENCRYPTION_KEY, PUBLIC_URL and the first admin in .env
docker compose up -d --build

Compose builds the image from source, Trivy included. Generate the secrets with openssl rand -base64 48, and POSTGRES_PASSWORD with openssl rand -hex 24, since it ends up in a URL.

Installation guide

Helm chart

Install the chart on Kubernetes

git clone https://github.com/Masmarino/ArtiFerris.git
cd ArtiFerris
helm upgrade --install artiferris ./helm/artiferris \
  --namespace artiferris --create-namespace \
  --set image.tag=0.6.1 \
  --set ingress.host=app.example.com --set ingress.wildcardHost='*.example.com' \
  --set artiferris.baseDomain=example.com

The chart generates the database password, JWT_SECRET and SECRETS_ENCRYPTION_KEY and finds them again from one deployment to the next. With helm template, Argo CD or Flux, set them yourself. The base domain is used for the organizations' subdomains.

Installation guide

From source

Run the backend and the web application locally

git clone https://github.com/Masmarino/ArtiFerris.git
cd ArtiFerris
cp .env.example .env          # then set POSTGRES_PASSWORD and JWT_SECRET
./scripts/dev.sh              # PostgreSQL via Compose, the backend on :8081, ng serve on :4200

You need rustup, Node.js 26 and Docker with Compose. The script starts PostgreSQL, applies the migrations and runs the backend on port 8081 and the Angular development server on port 4200.

Installation guide

What happens next

1
The server refuses to start if JWT_SECRET or SECRETS_ENCRYPTION_KEY is shorter than 32 bytes or starts with change-me, if the first administrator's password is still the example one, or if PUBLIC_URL points to 0.0.0.0.
2
It connects to PostgreSQL, applies its migrations, creates the first administrator if the users table is empty, and listens on port 8080.
3
The first sign-in walks you through enrolling an authenticator app or a passkey, and shows your ten backup codes. There is no way around it.

What you need

Docker with the Compose plugin, or a Kubernetes cluster with Traefik for the ingress.
PostgreSQL 18: the Compose stack and the chart bring their own.
A persistent volume for the npm archives and the Docker blobs: storage is a local file system, served by a single replica.
A domain name, a subdomain per organization, and TLS in front, through a reverse proxy. Passkeys only work on a secure origin.

Try ArtiFerris, then deploy your own instance.

The public instance lets you discover the product. Your instance keeps your packages.

Open ArtiFerris Installation guide