On-Premises Deployment
Authnull can be deployed entirely within your own infrastructure as a containerized stack managed by Docker Compose. This section explains how to set up and run the Authnull On-Premises application stack on a local virtual machine.
It walks through provisioning the server, installing Docker and its dependencies, configuring the reverse proxy and SSL, standing up the organization and tenant, and configuring database MFA, wallet users, and access policies.
Scope
This section covers only the components that belong to the Authnull On-Premises application stack. It does not cover unrelated infrastructure, third-party systems outside the Docker Compose stack, or components not listed in Authnull On-Premises Components.
Deployment Steps
Complete the guides in the order below:
- Installation - Download the package, configure environment variables, install Docker, and start the stack
- Domain and SSL Configuration - Configure DNS records, issue SSL certificates, and set up Nginx
- Organization and Tenant Setup - Create the organization and validate the tenant
- Database MFA and Agent Setup - Set the MFA mode, connection mode, and install the database agent
- Wallet Users and Policies - Add wallet users, create database policies, and connect to the database
Architecture Overview
The AuthNull platform is deployed as a containerized microservices architecture using Docker Compose. External traffic enters through NGINX, which acts as the primary reverse proxy and API entry point. NGINX routes incoming HTTP/HTTPS requests to the appropriate internal services.
The application layer contains multiple microservices responsible for authentication, authorization, policy management, wallet operations, and identity management.
Supporting infrastructure services provide persistent storage, caching, workflow orchestration, and logging capabilities. These services include PostgreSQL, Redis, Cassandra, Elasticsearch, MinIO, and Temporal.
All services communicate through an internal Docker network, ensuring secure service-to-service communication within the platform.
System Requirements
Hardware Configuration
Ensure your virtual machine meets the following hardware specifications to ensure platform stability:
| Component | Minimum | Recommended |
|---|---|---|
| CPU | 8 vCPU | 12+ vCPU |
| RAM | 16 GB | 32 GB |
| Storage | 150 GB SSD | 250+ GB SSD |
Software and Operating System Requirements
- Operating System: Ubuntu 22.04 LTS (recommended)
- Docker Engine: Version 24 or higher
- Docker Compose: Version 2 or higher
Authnull On-Premises Components
Authnull On-Premises is deployed as a set of Docker containers managed by Docker Compose. Below are only the components that belong to the Authnull On-Premises application stack.
Application Services
| Component | Purpose |
|---|---|
| did-react (Admin UI) | Web admin dashboard / frontend |
| self-service-console | End-user self-service portal |
| pam-service | Privileged Access Management & endpoints |
| ad-service | Active Directory integration & user sync |
| authn-service | Authentication |
| authnz | Authorization |
| mfa-service | Multi-factor authentication |
| user-service | User management |
| wallet-service | Credential wallet |
| issuer-service | Verifiable credential issuance |
| verifier-service | Verifiable credential verification |
| policy-service | Policy management |
| database-service | Database connection management |
| dashboard-service | Dashboard data |
| log-service / logworkflows | Logging & log workflows |
| okta-login | Okta integration |
| entra-service | Microsoft Entra / Azure AD integration |
| ssi-service | Self-sovereign identity |
| dbconsole-service | Database console UI |
Infrastructure Services
The following infrastructure services are bundled in the same stack:
| Component | Purpose |
|---|---|
| postgres | PostgreSQL 16 - primary database |
| redis | Cache & session / MFA state store |
| elasticsearch | Log indexing & search |
| cassandra | Time-series data store |
| minio | Object storage |
| temporal | Workflow orchestration engine |