On-Premise & Private Cloud Setup

For organizations managing sensitive architectural data, IT contracts, TCO figures, and DORA/NIS2 operational resilience assessments, EasyEA can be deployed entirely On-Premise or inside your Private Cloud with zero external cloud dependencies.

1. Infrastructure Requirements

CPU: 1–2 vCPUs (supports dozens of concurrent architects and executive viewers).
Memory: 512 MB minimum (1–2 GB recommended for large XML/Archi imports).
Database: PostgreSQL 14, 15, or 16 (dedicated VM, Patroni HA cluster, AWS RDS, Azure Database for PostgreSQL, or Cloud SQL).
Stateless Container: All models, schemas, and packages are stored transactionally inside PostgreSQL, allowing horizontal scaling of the easyea-app container.

2. Production Environment Variables

Configure the following environment variables in your .env or Kubernetes ConfigMap/Secrets:

PORT=8000
EASYEA_ENV=production
DATABASE_URL=postgresql://easyea_prod:STRONG_PASSWORD@pg-internal.corp.lan:5432/easyea_db?sslmode=require
EASYEA_SECRET_KEY="<generate-with: openssl rand -hex 32>"
EASYEA_RBAC_MODE=strict
EASYEA_SEED_DEMO_USERS=false

RBAC Modes (`EASYEA_RBAC_MODE`)

hybrid: Enables read-only browsing for internal intranet business stakeholders while enforcing full JWT authentication for all write, schema check-in, or administration actions.
strict: Mandates authentication across all API endpoints and views, applying granular workspace and role permissions.

3. Enterprise User Management & RBAC Administration

Inside Admin Hub ➔ User Management (UserManagement), administrators can manage enterprise identities:

Create User with Initial Password: Provision users with temporary or permanent credentials and assign predefined roles (Admin, Enterprise Architect, Solution Architect, Reviewer, Viewer).
Admin Password Reset Modal: Reset passwords on-demand via the dedicated ResetPasswordModal, instantly revoking existing JWT sessions to comply with corporate security standards.
Self-Service Password Updates: Authenticated users can change their passwords directly within their personal profile modal.

4. Desktop Protocol Handler Distribution (`easyea://`)

To enable seamless 1-click round-trip editing from the web app to Archi Tool and Draw.io Desktop, deploy the protocol handler across corporate workstations:

# On Linux workstations (Ubuntu, Debian, Fedora, RHEL)
cd /opt/easyea-desktop/launcher/linux
chmod +x install-handler.sh
./install-handler.sh

This registers the OS-level x-scheme-handler/easyea MIME handler and connects browser actions directly to easyea-handler.py. Clicking schema launch links immediately opens local modeling software with bidirectional lock synchronization.

5. Professional Turnkey Setup Services

Our engineering team provides turnkey consulting packages for enterprise rollouts:

Custom Kubernetes / Helm / OpenShift manifests.
Corporate Single Sign-On (OIDC / SAML / Active Directory / Keycloak) integration.
Reverse Proxy TLS hardening and security auditing.

👉 Request On-Premise or Private Cloud Installation Consulting