Self-Hosting Avnology ID

Avnology ID ships as a production-ready Docker Compose stack you can deploy against your own Postgres, Valkey, and MinIO. Every component -- gateway, Ory stack (Kratos, Hydra, Keto, Oathkeeper), Polis, audit / risk / webhook / SAML services, web dashboard, docs -- is built from this repo, and every release is tagged alongside api-gateway, hydra, kratos, etc. container images on GitHub Container Registry.

Where to start

1. Overview -- managed vs self-hosted decision guide and licensing.
2. Docker Compose deploy -- run docker compose -f docker-compose.traefik.yml up -d against deploy/docker/* config.
3. Environment variables -- every .env variable documented.
4. DNS setup -- 8 records to point at your host.
5. TLS via Traefik ACME -- Let's Encrypt or DNS-01 for wildcard.
6. Backup & migrations -- pg_dump, make db-migrate, restore paths.
7. Upgrading -- Ory rollover, zero-downtime patterns.
8. Kubernetes -- Helm chart is post-v1.0; Compose is the sole supported platform today.

System requirements

Postgres and MinIO dominate disk usage. Plan for ~10 GiB per 100k identities over 12 months of audit retention.

What gets deployed

19 services, all in one compose file: