メニュー
Deploy edgesentry-rs to a new server — TLS, PostgreSQL, S3/MinIO, systemd. Use when setting up a new deployment environment.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Add a new rule to an edgesentry-rs safety profile. Use when implementing a new regulation-backed detection rule (PROXIMITY_ALERT, ZONE_ENTRY, etc.).
Build, test, and lint edgesentry-rs before committing. Use before every commit or when verifying the workspace is clean.
Scaffold a new crate in the edgesentry-rs Cargo workspace. Use when adding a new pipeline stage or utility crate.
Operate edgesentry-rs in production — check health, query metrics, run backups, restore from backup. Use when monitoring or maintaining a deployed instance.
Publish a new edgesentry-rs release to crates.io. Use when cutting a release after all tests pass.
Verify an edgesentry audit chain using the eds CLI. Use to confirm a chain is intact and a payload matches its AuditRecord.
| name | eds-deploy |
| description | Deploy edgesentry-rs to a new server — TLS, PostgreSQL, S3/MinIO, systemd. Use when setting up a new deployment environment. |
| license | Apache-2.0 |
| compatibility | Requires Ubuntu/Debian, PostgreSQL 15+, access to S3/MinIO, Let's Encrypt or existing TLS cert |
| metadata | {"repo":"edgesentry-rs"} |
# Let's Encrypt (internet-facing)
certbot certonly --standalone -d <domain>
# Self-signed (air-gapped)
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
createdb edgesentry
createuser edgesentry --pwprompt
psql edgesentry < crates/edgesentry-audit/migrations/001_init.sql
Enable Object Lock (Compliance mode) for tamper-proof retention:
aws s3api create-bucket --bucket edgesentry-audit
aws s3api put-object-lock-configuration \
--bucket edgesentry-audit \
--object-lock-configuration '{"ObjectLockEnabled":"Enabled"}'
cp deploy/edgesentry-ingest.service /etc/systemd/system/
systemctl daemon-reload
systemctl enable edgesentry-ingest
systemctl start edgesentry-ingest
systemctl status edgesentry-ingest
curl -sf https://<host>/health | jq .
Full reference (PostgreSQL tuning, Kubernetes probes, horizontal scaling): references/deployment.md