Deploy
Docker Compose
Production-minded notes for the Compose stack.
Goal
Deploy ShieldGate with Docker Compose using strong secrets and explicit tenant binding.
Steps
Follow the quickstart in Docker Compose quickstart, then harden:
- Replace all
change-mevalues in.env. - Disable
DATA_PLANE_ALLOW_EMPTY_CONFIGfor production-like behavior. - Set
DATA_PLANE_TENANT_IDto the real tenant after first publish. - Mount GeoIP databases if geo rules are required.
- Persist PostgreSQL, Redis, Data Protection keys, and plugins volumes.
Verify
docker compose ps
curl http://localhost:8080/health
curl http://localhost:8081/ready
Related
- Upstream README:
deploy/docker/README.md - Kubernetes