Section
Administration
Running a server: configuration, the vault, accounts, sign-in, settings and deployment.
Configuration
The gosint.yaml file, GOSINT_* environment variables, and what is set in the console instead.
→
The vault and the unseal key
Why the server starts sealed, how to initialize and unseal it, change the unseal key, and seal it again.
→
Accounts and access
The first administrator, registration, the Accounts page, invitations, and the limits on signing in.
→
Single sign-on
Identity providers over OpenID Connect: adding one, who it admits, linking existing accounts, and 2FA after it.
→
Mail
The SMTP relay for password reset and invitation links.
→
Worker
How transforms and flows run: the queue, concurrency, leases and retries.
→
File store
Where files attached to entities are kept: a directory, an S3 bucket or the database.
→
Tools
nmap on the server, and the switches that let transforms reach private addresses for a lab.
→
Language models
The models the assistant and the template generator talk to, and whose API key they use.
→
Maintenance
The scheduled jobs, running one now, sealing a node, the health check and the release check.
→
Deployment
Behind a reverse proxy, TLS on the listener, PostgreSQL with several nodes, Docker, and backups.
→
Security model
What is encrypted at rest, what stays in clear, how sessions and requests are guarded, and the limits that remain.
→