Deploy Guide

Technical manual for initializing the Sovereign Node. Designed for Ubuntu/Debian server environments.

01. Host Preparation

System Requirements

Before initializing the Black Box, you must prepare the Ubuntu environment. We recommend creating a dedicated 'commander' user.

1. Create Dedicated User

sudo adduser commander
sudo usermod -aG sudo commander
su - commander

2. Install Docker Engine (V2)

aiCommandor requires the modern Docker Compose V2 plugin.

# 1. Add Docker's official GPG key
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

# 2. Add the repository to Apt sources
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

# 3. Install Docker and the Compose V2 Plugin
sudo apt-get update
sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin

3. Permission Configuration

sudo usermod -aG docker commander
newgrp docker

02. Black Box Initialization

Once the host is prepared, transfer the distribution bundle and execute the installer.

mkdir -p ~/aicommandor
tar -xzvf aicommandor_v1.0.1_sovereign.tar.gz -C ~/aicommandor
cd ~/aicommandor
chmod +x install.sh
./install.sh

03. HTTPS Shield

By default, aiCommandor uses an internal Certificate Authority. To migrate to a public domain with Let's Encrypt:

  • Edit the .env file and set SERVER_NAME to your domain.
  • Open Caddyfile and comment out tls internal.
  • Restart the stack: docker compose down && docker compose up -d.

04. Network Isolation

The system uses a hardened proxy architecture. Only the following ports are exposed:

  • 80/443: Public Entry Points guarded by the HTTPS Shield.