Deployment

Coco ships with three ready-made deployment paths. The enterprise artifact is api + postgres; the Next.js app is optional.

Docker Compose

./scripts/compose-local.sh — Postgres + API + app on your laptop.

./scripts/k8s-local.sh — kind + Helm chart for a cluster smoke test.

Terraform + reference architectures in infra/.

pnpm db:migrate

Idempotent, ordered SQL in packages/db/drizzle/.

Webhook secrets, connector credentials, and model keys are encrypted with COCO_SETTINGS_ENCRYPTION_KEY — 32 bytes, base64-encoded:

openssl rand -base64 32

Without COCO_SETTINGS_ENCRYPTION_KEY, creating or rotating a webhook signing secret returns 503. Same posture applies to connector credentials.

⌘I