Sovereign Deployment via Soviez.sh

soviez.sh is the official production wizard for Soviez ERP. It prepares the host, provisions isolated Docker tenants, manages HTTPS, and covers day-2 operations such as backup, staging clones, password recovery, and image updates. You remain in full control of the server; Soviez Cloud is used only for licensing and account management.

What the script does

Requirements

For larger operator counts, also review System Requirements.

Quick start

Canonical one-liner (CLI agents hitting https://soviez.sh receive the installer automatically):

curl -sSL https://soviez.sh | bash

Prefer an explicit download + mode workflow? Pull from the canonical deploy repository (github.com/Soviez/soviez-deploy), prepare the host once, then create your first tenant:

curl -fsSL https://raw.githubusercontent.com/Soviez/soviez-deploy/main/soviez.sh -o soviez.sh
chmod +x soviez.sh

sudo ./soviez.sh --init          # once per server
# Point DNS at this host, then:
sudo ./soviez.sh --new           # create first (or next) tenant

After --new finishes, open the printed https://your.domain URL, enter the Database Master Password shown once on screen, create your database, then activate your license from soviez.com/pricing.

Command menu

Tenant references accept forms such as 1, soviez-web-1, or the web container name (depending on the mode).

Install a new instance (--new)

1. Run --init successfully at least once.
2. Create DNS records for your FQDN → the server's public IP.
3. Run sudo ./soviez.sh --new.
4. Confirm the public IP and enter the domain twice when prompted.
5. Wait for DNS validation (or carefully use force if you accept a temporary mismatch).
6. Save the Master Password alert immediately — it unlocks the Web Database Manager.
7. Visit https://your.domain, create the database, and activate licensing.

Each --new allocates the next tenant index (.soviez_1.env, .soviez_2.env, …) with its own network, volumes, MAC address, and host port (starting from 8073).

If provisioning stops mid-flight (Nginx / SSL)

sudo ./soviez.sh --formsetup

HTTPS-only repairs (Cloudflare proxy / Certbot)

sudo ./soviez.sh --formssl
sudo ./soviez.sh --formssl erp.example.com

If Let's Encrypt fails, self-signed HTTPS on port 443 remains online. Set Cloudflare SSL/TLS mode to Full.

Updates

sudo ./soviez.sh --update

• Pulls soviez/soviez-erp:latest
• Upgrades discovered databases
• Recycles web containers
• Leaves Postgres volumes, MAC addresses, ports, and licenses intact

Schedule updates during a maintenance window, verify backups beforehand, and confirm application health afterward.

Backup & inventory

sudo ./soviez.sh --backup soviez-web-1 production
sudo ./soviez.sh --backup-list

Restore is a deliberate operations procedure (extract the archive, restore the pg_dump custom format, restore filestore). The wizard does not auto-restore onto a different host.

Staging clones

sudo ./soviez.sh --stage soviez-web-1 production
# test safely on database "stage"
sudo ./soviez.sh --dropstage soviez-web-1 stage

--dropstage aborts unless database.is_neutralized=True (Safe Shield), so live production databases cannot be dropped by mistake.

Passwords & domain changes

Monitoring & logs

sudo ./soviez.sh --list
sudo ./soviez.sh --monitor
sudo ./soviez.sh --logs soviez-web-1
sudo tail -n 200 /var/log/soviez_setup.log

--list, --monitor, --logs, and --backup-list keep status on the terminal without flooding the setup log.

After first boot checklist

• HTTPS URL loads with the Soviez ERP Database Manager or login screen
• Master Password stored in your vault
• Company database created
• License activated with the Cloud portal fingerprint
• Optional: place custom addons under /etc/soviez_web_N/addons
• Optional: schedule periodic --backup jobs

Common problems

Need licensing, migration, or account topics beyond the installer? Visit the Help Center.