Deploy Guide
Technical manual for initializing the Sovereign Node. Designed for Ubuntu/Debian server environments.
01. Host Preparation
System Requirements
Before initializing the Black Box, you must prepare the Ubuntu environment. We recommend creating a dedicated 'commander' user.
1. Create Dedicated User
sudo adduser commander
sudo usermod -aG sudo commander
su - commander
2. Install Docker Engine (V2)
aiCommandor requires the modern Docker Compose V2 plugin.
# 1. Add Docker's official GPG key
sudo apt-get update
sudo apt-get install ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc
# 2. Add the repository to Apt sources
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
# 3. Install Docker and the Compose V2 Plugin
sudo apt-get update
sudo apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
3. Permission Configuration
sudo usermod -aG docker commander
newgrp docker
02. Black Box Initialization
Once the host is prepared, transfer the distribution bundle and execute the installer.
mkdir -p ~/aicommandor
tar -xzvf aicommandor_v1.0.1_sovereign.tar.gz -C ~/aicommandor
cd ~/aicommandor
chmod +x install.sh
./install.sh
03. HTTPS Shield
By default, aiCommandor uses an internal Certificate Authority. To migrate to a public domain with Let's Encrypt:
- Edit the
.envfile and setSERVER_NAMEto your domain. - Open
Caddyfileand comment outtls internal. - Restart the stack:
docker compose down && docker compose up -d.
04. Network Isolation
The system uses a hardened proxy architecture. Only the following ports are exposed:
- 80/443: Public Entry Points guarded by the HTTPS Shield.