Deployment

Coconut ships with three ready-made deployment paths. The enterprise artifact is api + postgres; the Next.js app is optional.

Docker Compose

./scripts/compose-local.sh runs Postgres, the API, and the app on your laptop.

./scripts/k8s-local.sh brings up kind with the Helm chart for a cluster smoke test.

Terraform and reference architectures, published with the deployment guide.

pnpm db:migrate

Migrations are idempotent and ordered, so re-running is safe.

Webhook secrets, connector credentials, and model keys are encrypted with COCO_SETTINGS_ENCRYPTION_KEY, which is 32 bytes, base64-encoded:

openssl rand -base64 32

Without COCO_SETTINGS_ENCRYPTION_KEY, creating or rotating a webhook signing secret returns 503. Same posture applies to connector credentials.