Installation

Prerequisites

• Docker: Docker Engine 20+ and Docker Compose v2 (for containerized deployment)
• Bare Metal: Linux amd64, SQLite or PostgreSQL, optional systemd for service management

---

Quick Start (Docker)

# 1. Get the Docker image
docker load -i license-server.tar
# or
docker pull git.prd.embidio.de/hive/license-server:v1.0.0

# 2. Configure
cat > .env <<EOF
LICENSE_JWT_SECRET=$(openssl rand -base64 32)
EOF

# 3. Run
docker compose -f deployment/docker-compose.yml up -d

# 4. Open http://localhost:5656

---

Docker Compose Profiles

File	Use Case	Database
docker-compose.yml	Standard deployment	SQLite (default) or PostgreSQL
docker-compose.full.yml	Full stack with monitoring	PostgreSQL + Prometheus + Grafana + Loki
docker-compose.customer.yml	Customer deployment package	SQLite + optional monitoring
docker-compose.dev.yml	Development	SQLite

Standard Deployment (SQLite)

cd deployment

# Create .env file
cat > .env <<EOF
LICENSE_JWT_SECRET=$(openssl rand -base64 32)
LICENSE_LOGGING_LEVEL=info
TZ=Europe/Berlin
EOF

# Start
docker compose up -d

# Verify
docker compose ps
curl http://localhost:5656/health

Standard Deployment (PostgreSQL)

cd deployment

cat > .env <<EOF
LICENSE_JWT_SECRET=$(openssl rand -base64 32)
LICENSE_DATABASE_DRIVER=postgres
LICENSE_DATABASE_PASSWORD=$(openssl rand -base64 24)
LICENSE_LOGGING_LEVEL=info
TZ=Europe/Berlin
EOF

# Start with PostgreSQL profile
docker compose --profile postgres up -d

Full Stack with Monitoring

Includes PostgreSQL, Prometheus, Grafana, Loki, Promtail, AlertManager, cAdvisor, and Node Exporter.

cd deployment

cat > .env.full <<EOF
LICENSE_JWT_SECRET=$(openssl rand -base64 32)
LICENSE_DATABASE_PASSWORD=$(openssl rand -base64 24)
GF_SECURITY_ADMIN_PASSWORD=changeme
EOF

docker compose -f docker-compose.full.yml --env-file .env.full up -d

Services:

Service	Port	Description
License Server	5656 (HTTP), 50090 (gRPC)	Main application
PostgreSQL	5432	Database
Prometheus	9091	Metrics collection
Grafana	3000	Dashboards
Loki	3100	Log aggregation
AlertManager	9093	Alert routing
cAdvisor	8081	Container metrics
Node Exporter	9100	Host metrics

---

Binary Installation

Prerequisites

• Linux (amd64)
• SQLite or PostgreSQL
• (Optional) systemd for service management

Installation Steps

# 1. Extract the release package
tar xzf license-server-v1.0.0-linux-amd64.tar.gz
cd license-server

# 2. Create config
./license-server config init --output config.yaml

# 3. Edit config.yaml with your settings
#    At minimum, set jwt.secret

# 4. Run migrations
./license-server migrate up

# 5. Create initial admin
./license-server seed

# 6. Start the server
./license-server serve

systemd Service

Create /etc/systemd/system/license-server.service:

[Unit]
Description=License Server
After=network.target
Wants=network-online.target

[Service]
Type=simple
User=license-server
Group=license-server
WorkingDirectory=/opt/license-server
ExecStart=/opt/license-server/license-server serve
Restart=on-failure
RestartSec=5

# Environment
Environment=LICENSE_JWT_SECRET=your-secret-here
Environment=LICENSE_LOGGING_LEVEL=info
Environment=LICENSE_LOGGING_FORMAT=json

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/license-server/data /opt/license-server/backups
PrivateTmp=true

[Install]
WantedBy=multi-user.target

# Create service user
sudo useradd -r -s /sbin/nologin license-server

# Set permissions
sudo chown -R license-server:license-server /opt/license-server

# Enable and start
sudo systemctl daemon-reload
sudo systemctl enable license-server
sudo systemctl start license-server

# Check status
sudo systemctl status license-server
sudo journalctl -u license-server -f

Directory Layout

/opt/license-server/
├── license-server          # Binary
├── config.yaml             # Configuration
├── server.license          # Server license file
├── data/
│   ├── license.db          # SQLite database
│   └── keys/               # Signing keys
│       └── server/
│           ├── signing.key
│           └── signing.pub
├── backups/                # Database backups
└── uploads/                # Avatar images, logos

---

Health Check

After installation, verify the server is running:

curl http://localhost:5656/health

Returns 200 OK when the server is ready to accept requests.

Next Steps

Once the server is running, head to First Steps to create your admin account and issue your first license.