Deploy Orionis

Use Docker Hub as the primary public image source, or GitHub Container Registry when you want a GitHub-native mirror.

Docker Hub

docker pull stremovskyy/orionis:0.3.1

GitHub Container Registry

docker pull ghcr.io/stremovskyy/orionis:0.3.1

Run the auth server

test -f config/orionis.json || cp config/orionis.example.json config/orionis.json

docker run --rm -d \
  --name orionis-auth \
  -p 8080:8080 \
  -v "$PWD/config:/app/config:ro" \
  -v orionis-var:/app/var \
  stremovskyy/orionis:0.3.1

Verify health

curl -fsS http://localhost:8080/healthz
curl -fsS http://localhost:8080/readyz

AWS ECS Fargate

Use the checked-in ECS templates when you want a managed AWS deployment from the public image.

openssl genpkey -algorithm ED25519 > /tmp/orionis-ed25519.pem
openssl genpkey -algorithm ED25519 > /tmp/orionis-ed25519-old.pem

aws secretsmanager create-secret \
  --name orionis/signing-key \
  --secret-string file:///tmp/orionis-ed25519.pem

aws secretsmanager create-secret \
  --name orionis/signing-key-old \
  --secret-string file:///tmp/orionis-ed25519-old.pem

aws secretsmanager create-secret \
  --name orionis/config \
  --secret-string file://deploy/aws/ecs/orionis-config.example.json

python3 - <<'PY' > /tmp/orionis-task-definition.json
import os
from pathlib import Path
from string import Template

template = Template(Path("deploy/aws/ecs/task-definition.template.json").read_text())
print(template.safe_substitute(os.environ))
PY

aws ecs register-task-definition \
  --cli-input-json file:///tmp/orionis-task-definition.json

Open the AWS ECS guide.