Menu
Deploy edgesentry-rs to a new server — TLS, PostgreSQL, S3/MinIO, systemd. Use when setting up a new deployment environment.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Add a new rule to an edgesentry-rs safety profile. Use when implementing a new regulation-backed detection rule (PROXIMITY_ALERT, ZONE_ENTRY, etc.).
Build, test, and lint edgesentry-rs before committing. Use before every commit or when verifying the workspace is clean.
Scaffold a new crate in the edgesentry-rs Cargo workspace. Use when adding a new pipeline stage or utility crate.
Operate edgesentry-rs in production — check health, query metrics, run backups, restore from backup. Use when monitoring or maintaining a deployed instance.
Publish a new edgesentry-rs release to crates.io. Use when cutting a release after all tests pass.
Verify an edgesentry audit chain using the eds CLI. Use to confirm a chain is intact and a payload matches its AuditRecord.
| name | eds-deploy |
| description | Deploy edgesentry-rs to a new server — TLS, PostgreSQL, S3/MinIO, systemd. Use when setting up a new deployment environment. |
| license | Apache-2.0 |
| compatibility | Requires Ubuntu/Debian, PostgreSQL 15+, access to S3/MinIO, Let's Encrypt or existing TLS cert |
| metadata | {"repo":"edgesentry-rs"} |
# Let's Encrypt (internet-facing)
certbot certonly --standalone -d <domain>
# Self-signed (air-gapped)
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
createdb edgesentry
createuser edgesentry --pwprompt
psql edgesentry < crates/edgesentry-audit/migrations/001_init.sql
Enable Object Lock (Compliance mode) for tamper-proof retention:
aws s3api create-bucket --bucket edgesentry-audit
aws s3api put-object-lock-configuration \
--bucket edgesentry-audit \
--object-lock-configuration '{"ObjectLockEnabled":"Enabled"}'
cp deploy/edgesentry-ingest.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable edgesentry-ingest
systemctl start edgesentry-ingest
systemctl status edgesentry-ingest
curl -sf https://<host>/health | jq .
Full reference (PostgreSQL tuning, Kubernetes probes, horizontal scaling): references/deployment.md