- Generate the RSA key pair (if you haven't already):
This produces
cd keys ./setup.shvalidation.key(private, keep it safe) andvalidation.key.pub. - (Optional) Create a
.envfile in the repo root to override any of the variables consumed bydocker-compose.yml(for exampleGOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,GOOGLE_REDIRECT_URL,PUBLIC_TRUSTED_ENTITY_APP_URL, etc.). - Build and launch every service:
docker compose up --build
The stack exposes:
http://localhost:4173→ Community Frontendhttp://localhost:4174→ Trusted Entity App
Both the backend and the trusted-entity app mount the ./keys directory, so make sure the generated files stay there (or update the compose file to point somewhere else). Set real Google OAuth credentials before attempting to log in through oauth.