Browse documentation

Start here

• Documentation
• Project overview
• Install and setup
• User manual
• Every menu and option
• Feature guide
• Screenshot gallery

Deploy

• Choose a deployment
• Node.js
• Kubernetes
• Render, Railway, Fly.io, DO
• AWS
• Google Cloud
• Azure
• Build and install files

Run and secure

• Configuration
• Pages and data lifecycle
• Multi-factor authentication
• Security controls
• Operations and recovery
• Enterprise evaluation
• Comparison
• Website deployment
• Developer guide
• Report a vulnerability
• Estora reference data
• Unreleased design archive

SignalHub 1.0 · Updated 2026-10-19 · Markdown source

Azure: Container Apps with Azure Database for PostgreSQL

On this page

1. Database
2. Container App
3. AKS

Database

1. Create Azure Database for PostgreSQL – Flexible Server (16+) with a database signalhub, and allow access from the Container Apps environment (VNet integration or a firewall rule).
2. Flexible Server requires TLS. Its certificates chain to DigiCert/Microsoft roots that Node already trusts, so ?sslmode=verify-full works; if your tenant uses a different CA, paste it into DATABASE_SSL_CA.

DATABASE_URL=postgresql://signalhub:<password>@<server>.postgres.database.azure.com:5432/signalhub?sslmode=verify-full

Container App

az containerapp create -g <rg> -n signalhub --environment <env> \
  --image ghcr.io/rameshbgm/signalhub:<version> \
  --target-port 3000 --ingress external \
  --min-replicas 1 --cpu 1 --memory 2Gi \
  --secrets database-url='postgresql://…' session-secret="$(openssl rand -base64 48)" \
            encryption-key="$(openssl rand -base64 48)" admin-password='a-long-unique-password' \
  --env-vars DATABASE_URL=secretref:database-url SESSION_SECRET=secretref:session-secret \
             ENCRYPTION_KEY=secretref:encryption-key STATUS_BOOTSTRAP_PASSWORD=secretref:admin-password \
             NEXT_PUBLIC_APP_URL=https://status.example.com

--min-replicas 1 keeps the worker running. Add a health probe on /api/health/live, and bind your domain with a managed certificate. Store a copy of the encryption key in Key Vault.

After deploy, open the app URL and sign in at /login as admin with the bootstrap password.

After sign-in, open Platform administration → Configuration → Runtime to check database, migration, and worker health.

AKS

Use the Kubernetes manifests.