Skip to content
Olivasal Olivasal

Start here

Self-host install

One command provisions the whole stack on a fresh server — media, API, database, TLS. About fifteen minutes, most of it image pulls.

Step one, always

Get your key from Megam before you download anything.

Olivasal’s images live in a private registry. Megam issues you a registry username and token when your licence is arranged. Without them the installer stops at sign-in and pulls nothing — so ask for the key first, then come back to the command below.

Olivasal · self-host

Registry credentials

Username
Not issued yet
Token
Not issued yet
Issued by Megam Technologies Not issued yet

Step two, once you have it

Run this on a fresh server, as root

curl -fsSL https://olivasal.com/install/install.sh | sudo bash

The installer asks for your domain, your company name, an admin email, and then the registry username and token. If the key is wrong you will see Registry login failed. Check the username and token Megam gave you. — nothing has been changed on the machine at that point, so fix the key and run it again.

Before you start

One fresh Linux server, one domain. The installer provisions everything else — but two things it cannot do for you, and both stop the install cold if they are missing.

  • A public domain with its DNS A record already pointing at this machine. The certificate is issued against it.
  • 30 GB of free disk — 60 GB if you want AI meeting summaries.
  • A GPU, only for AI recaps. Install the NVIDIA driver and nvidia-container-toolkit yourself first. Everything else — meetings, recording, chat — works without one.

These ports must be reachable from the internet:

PortProtocolWhat it carries
80, 443TCPThe site and its TLS certificate
7881TCPMedia fallback for restrictive networks
50000–60000UDPMeeting audio and video

What the installer does

In order, so you know where it is if it stops:

  1. Checks the machine

    Confirms you are root, that the domain resolves here, and that port 80 is reachable from the internet — the certificate cannot be issued otherwise.

  2. Installs Docker

    Docker Engine and the Compose plugin, if they are missing. The NVIDIA driver is not installed for you — driver versions are hardware-specific and a wrong one breaks the GPU.

  3. Writes the configuration

    Generates every secret and writes /opt/olivasal/.env. Re-running the installer never overwrites an existing .env.

  4. Signs in and pulls images

    This is where your key is used. Wrong or missing credentials stop the install here, before anything is downloaded.

  5. Issues a certificate and starts up

    Requests a Let’s Encrypt certificate for your domain, then brings the stack up. Around 5–15 minutes end to end, mostly image pulls.

It is safe to re-run. An existing .env is never overwritten, so a second run repairs a failed install rather than resetting it.

Download instead of piping

Piping a script into sudo bash is fine when you trust the source, and less fine when your security team would like to read it first. Download it, read it, then run it:

curl -fsSL -o install.sh https://olivasal.com/install/install.sh
less install.sh
sudo bash install.sh

The compose file is embedded in the script, so that one file is the whole installer — nothing else is fetched at run time. If you would rather review it separately it is published at docker-compose.yml.

After it finishes

  • Open your domain and create the first account. It becomes the administrator, and creating it registers the installation with Megam.
  • Ask Megam to activate your licence. Until it is activated you have full access for 14 days.
  • Add your SMTP details to /opt/olivasal/.env so invitations can be emailed, then restart the API.
cd /opt/olivasal
docker compose ps            # what is running
docker compose logs -f api   # follow the API log
docker compose restart       # restart everything

From here, see Installation for hardware sizing and topology, AI recaps for the GPU setup, and Administration for managing users.