Installing an agent in the data center

You can install the encryption agent in a data center or cloud provider of computing resources.

Ordering the appropriate service

This article describes how to use the service as an example kamatera.com (price from 4 USD / month).

If you use a service from Microsoft Azure Container App or Amazon Elastic Container Service, follow the instructions of this service, taking into account the instructions for setting up the encryption agent.

Choose to create a new service, a virtual machine (hereinafter - VM).

For the location, it is advisable to choose Germany, as Schrift's servers are located in Germany, and geographical proximity to them will provide better speed of interaction.

Select a VM with a Docker application enabled.

Choose a VM specification. For companies with up to 20 employees, the following minimum specifications are quite suitable: 1 vCPU, 1 GB RAM, 10 GB NVMe. The larger amount of resources is mainly related to the intensity of file processing, namely the creation of pdf previews and thumbnails prepared by the encryption agent. Since the encryption agent does not store client data, but only the logs of its work for the last 3 days, the size of the disk space can be selected as minimal as possible. In the example below, the price does not depend on whether you choose 10 or 20 GBt.

You can leave the rest of the settings as default and create the service.

Setting up a VM for work

Connect using an application like FileZilla (connection port 22) and create an agents folder in the home folder (or similar). Copy the settings.env (after it is brought to the correct content state) and docker-compose.yml files into it

If you need to migrate an already running agent from another device, copy the agent database file encryptionagent.db to the same folder

Open the VM console

To create a container in Docker, run the following command:
docker compose -p encryptionagent-11896 -f /home/agents/docker-compose.yml --env-file /home/agents/settings.env up -d --force-recreate
where:
encryptionagent-11896 - container name
/home/agents - path to the folder with the agent files

Authorize the agent from the user's device

To access the agent authorisation form in a web browser from a user's device, run the following command on the local device:
ssh -f -N -L 5014:127.0.0.1:5014 root@IP-address
where: IP-address - IP-address of VM

Enter the VM password when prompted for the password.

If you generated a private key for access when creating the VM, you can connect using the private key instead of the password:
ssh -f -N -i /path-folder/private.txt -L 5014:127.0.0.1:5014 root@IP-address
where /path-folder - path to the folder where the key file is located.

Go to the browser at http://localhost:5014 and authorise the agent according to the instructions in our article.

If you copied the database file of a previously configured agent and it had a valid API key, the agent will start working automatically, which can be checked in the Company Account.