Skip to main content
Coco ships with three ready-made deployment paths. The enterprise artifact is api + postgres; the Next.js app is optional.

Docker Compose

./scripts/compose-local.sh — Postgres + API + app on your laptop.

Kubernetes

./scripts/k8s-local.sh — kind + Helm chart for a cluster smoke test.

AWS

Terraform + reference architectures in infra/.

​
Migrations

Idempotent, ordered SQL in packages/db/drizzle/.

​
Secrets at rest

Webhook secrets, connector credentials, and model keys are encrypted with COCO_SETTINGS_ENCRYPTION_KEY — 32 bytes, base64-encoded:
Without COCO_SETTINGS_ENCRYPTION_KEY, creating or rotating a webhook signing secret returns 503. Same posture applies to connector credentials.