Self-hosted installation
Arandu AI installs on your server with one command
A guided installer downloads the signed OCI image, verifies its signature with cosign, generates secrets, and leaves the Docker Compose stack ready to start. Estimated time: 30 minutes on standard hardware.
Works on Linux, macOS and Windows (WSL2). Automatically detects Podman or Docker and your architecture (arm64 / amd64).
Request early accessv1.0.0-rc.3
System requirements
Requirements for Arandu AI and its own services (arandu-server, console, PostgreSQL, Redis, Qdrant, storage). Local models require additional hardware depending on the runtime the operator chooses.
| Component | Minimum requirement | Recommended |
|---|---|---|
| Operating system | Linux, macOS or Windows with WSL2 | Linux x86_64/arm64 for production |
| Container engine | Podman 4+ or Docker 24+, with its compose plugin | Podman 5+ (recommended) or Docker 25+ |
| RAM | 4 GB free for Arandu | 8 GB with RAG enabled |
| CPU | 2 vCPU for Arandu | 4 vCPU recommended |
| Disk | 20 GB free minimum | Scales with your RAG corpus |
| Network | HTTPS egress to descargas.arandu-ia.com, license.arandu-ia.com and your BYOK providers | — |
| Reverse proxy | Caddy, Nginx, Traefik or equivalent with valid TLS | Caddy (automatic TLS) |
| Tools | bash, curl, openssl | cosign to verify the signature |
Post-installation hardening
| Action | Why |
|---|---|
| Set up a reverse proxy with TLS and HSTS | Encryption in transit is mandatory in production |
Keep arandu-server listening only on 127.0.0.1 behind the proxy | Reduces attack surface |
| Schedule a daily backup of PostgreSQL + storage + Qdrant + KEK | Recommended RPO: 24 hours |
| Store an offline copy of the KEK on a separate medium | Without the KEK, BYOK credentials are unrecoverable |
| Set up an IP allowlist for production API keys | Reduces exposure if an API key leaks |
Subscribe /metrics to the client's Prometheus | Observability: latency, errors, cost, security hits |
| Schedule a quarterly restore drill | Verifies backups are actually recoverable |
Need help with the installation?
Standard support included with the Pro subscription covers help with upgrades and restores. Contact us by email.