Can I initial my postgresql provider with my docker

[JanneHarju]

Hello, i'm trying to get sftpgo working with docker, because my initial goal is to get it work in azure container with keyVault and blob storage. At first I'm getting familiar with sftpgo in my local machine. So as header asks, can I initial my database using only docker or am I forced to install cli? I'm using windows 10.

[drakkan]

Hi,

I'm not sure to understand you question, you have several options:

1. you can install SFTPGo directly on Windows, download link here. It will run as service using SQLite provider. It just works, you can connect to the web ui and start using it. Please take a look at the getting started guide here
2. you can configure your windows service to connect to a Postgres instance editing the sftpgo.json configuration file and then restarting the SFTPGo service. Postgres can run natively on windows or on docker
3. you can install both sftpgo and postgres in docker. I'm not familiar with Docker desktop for windows. Please take a look here to understand the docker commands required to configure SFTPGo. You can configure postgres access via env vars

If you want to change the default configuration, for example to connect to Postgres, it is not difficult but it also depends on your background, you probably have to do some steps using a cli and / or a text editor.

I also offer pre-configured Amazon Machine images, postgres is available, obviously this is not free (but using them you will help the project)

https://aws.amazon.com/marketplace/seller-profile?id=6e849ab8-70a6-47de-9a43-13c3fa849335

thanks

[JanneHarju]

I managed it to work. Thank you for help. Now trying to learn how configure it with Azure blob storage. It seems to be quite straight forward with UI. After that I will check how I can use Azure Key Vault. In documentation it says that it is still experimental. Do you have some guide for configuring it? I didn't find manual.

[JanneHarju]

To answer to myself https://github.com/sftpgo/sftpgo-plugin-kms#azure-keyvault This seems to be enough.

[drakkan]

To answer to myself https://github.com/sftpgo/sftpgo-plugin-kms#azure-keyvault This seems to be enough.

this should work, please note that plugins are supported only in edge* tags for now so you have to use one of these docker images

[JanneHarju]

start to wonder what keys are going to KeyVault? For example in Azure blob storage? Account Key, SAS URL? And for users Public key? So what Kay Vault is used for in sftpgo?

[drakkan]

start to wonder what keys are going to KeyVault? For example in Azure blob storage? Account Key, SAS URL? And for users Public key? So what Kay Vault is used for in sftpgo?

Please take a look at the docs here and at the schema definition here.

For azblob config you are right, AccountKey and SAS URL can be stored in key vault.

If you don't configure an external KMS they will be stored using the local provider. This is secure if you define a master key and keep it secret (you can use a docker secret or something similar).

Public keys can be shared securely, there is no need to encrypt them