Deployment Guide

Deployment Guide

Docker Deployment

Build Image

docker build -t maref:latest .

Run Container

docker run -d \
  --name maref \
  -p 8000:8000 \
  -e MAREF_SAFETY_LEVEL=production \
  maref:latest

Docker Compose

version: '3.8'
services:
  maref:
    image: maref:latest
    ports:
      - "8000:8000"
    environment:
      MAREF_SAFETY_LEVEL: production
    volumes:
      - maref-data:/data
    restart: unless-stopped

volumes:
  maref-data:

---

Kubernetes Deployment

Apply Configs

kubectl apply -f k8s/production/

Components

Resource	Purpose
Deployment	Main application
Service	Internal networking
Ingress	External access
ConfigMap	Environment configuration
Secret	Sensitive credentials

---

Serverless Deployment

AWS Lambda

# Package for Lambda
zip -r maref-lambda.zip .

Google Cloud Run

gcloud run deploy maref \
  --image gcr.io/PROJECT/maref:latest \
  --port 8000 \
  --allow-unauthenticated

---

Production Checklist

• MAREF_SAFETY_LEVEL=production set
• All 8 defense layers enabled
• Minimum OS permissions granted
• Audit logging configured
• Prometheus monitoring active
• CircuitBreaker alerting set up
• Dependencies up to date
• TLS certificates valid
• Database backups configured
• Incident response plan documented

---

Environment Variables

Variable	Default	Description
MAREF_SAFETY_LEVEL	development	Safety enforcement level
MAREF_PORT	8000	Service port
MAREF_LOG_LEVEL	info	Logging verbosity
MAREF_HMAC_KEY	(required in prod)	Audit log signing key
MAREF_TRUST_DB	./trust.db	Trust score database path

---

← Back to Home