Getting started

Requires Docker with Compose. (To install on a cluster instead, see Helm on Kubernetes.)

cd smo
scripts/init_secrets.sh                  # once: writes the database password and the enrollment secret to secrets/
export GUI_ADMIN_PASSWORD='choose-one'   # optional; otherwise one is generated
docker compose up -d --build
docker compose ps

init_secrets.sh is mandatory: there are no default credentials, and the stack does not start without secrets/enrollment_secret.

Where things are

What	Address
R1 Termination (the gateway rApps use)	http://localhost:8080 (curl -s http://localhost:8080/bootstrap)
Operator GUI	http://localhost:3000, user admin
Postgres	localhost:5432

Every other service is reachable only on the compose network. If you did not set GUI_ADMIN_PASSWORD, read the generated one with docker compose exec gui-bff cat /data/initial-admin-password.

Next steps

• Guided walk-through of every module with copy-pasteable commands: smo/DEMO_RUNBOOK.md
• One sequence diagram per flow: smo/docs/call-flows/ (27 flows, including the four rApp closed loops)
• TLS (development CA + nginx edge): scripts/make_dev_certs.sh, then docker compose --profile tls up -d (GUI on https://localhost:3443, R1 on https://localhost:8443)