Installing the Device Registration Portal - BlueCat Gateway - 26.1.0

Prerequisites:

• The Device Registration Portal installation package extracted on the host

• The Address Manager and DNS/DHCP Server environments configured as described in the Address Manager configuration section

• All required values collected (hostname, BAM IP, LDAP/AD details, etc.)

1. Configure the environment

   • Copy the environment template and edit .env:

     cp .env.prod .env

   • It is recommended to fill in all required values. Set the following values as a minimum:

     Value	Description
     PUBLIC_BASE_HOST	The public hostname users will access.
     PUBLIC_BASE_IP	The public IP users can access.
     FRONTEND_HOST	<http://<PUBLIC_BASE_HOST>>
     BACKEND_CORS_ORIGINS	["http://drp","https://<PUBLIC_BASE_HOST>","http://<PUBLIC_BASE_IP>","https://<PUBLIC_BASE_IP>"]
     POSTGRES_PASSWORD	A strong database password.
     DATABASE_URL	Update with the chosen password.
     DRP_BAM_URL, DRP_BAM_USERNAME, DRP_BAM_PASSWORD	BAM connection details
     TRUSTED_IPS	Your network's CIDR (Classless Inter-Domain Routing) range. For example: 10.240.254.0/24,10.244.23.128/25
     TLS_DEFAULT_COMMON_NAME	Set to PUBLIC_BASE_HOST.

2. Enable TLS certificates (required before first start)

   To enforce HTTPS, it is strongly recommended to place a valid certificate under the correct path before starting the application:

   cp your-cert.crt certificates/traefik/tls.crt
   cp your-key.key  certificates/traefik/tls.key

   Requirements:

   • Files must be PEM-encoded
   • The certificate SAN must include the PUBLIC_BASE_HOST value
   Important: If a valid certificate is not provided, DRP will generate a temporary self-signed certificate on first start. Replace it with a valid certificate as soon as possible.

3. Start the application

   • Online installation

     docker login quay.io
     docker compose pull
     docker compose up -d

   • Offline installation

     docker load -i drp-images.tar.gz
     docker compose up -d