HUMAN THEORY APPS

# Deployment Guide

Production deployment guide for arifOS MCP including VPS architecture, Docker configuration, TLS setup, and monitoring.

Production Ready

arifOS MCP is designed for production deployments with high availability, horizontal scaling, and comprehensive monitoring built-in.

## VPS Architecture

For production deployments, we recommend the following VPS architecture:

arifOS MCP
Server
Port 8080
⟷
Qdrant
Vector Store
Port 6333
⟷
VAULT999
Ledger
Persistent Disk
↑
Nginx
Reverse Proxy
TLS Termination
↑
Internet ← MCP clients connect here

### Architecture Components

Component | Purpose | Port
--- | --- | ---
arifOS MCP Server | Constitutional governance kernel | 8080
Qdrant | Vector storage for session memory | 6333
VAULT999 | Merkle chain ledger on persistent disk | —
Nginx | TLS termination and reverse proxy | 443 → 8080

## Docker Setup

All services are containerized with Docker Compose:

docker-compose.yml

    version: '3.8'

    services:
      arifosmcp:
        image: arifosmcp:latest
        container_name: arifosmcp
        restart: unless-stopped
        ports:
          - "127.0.0.1:8080:8080"
        environment:
          - ARIFOS_ENV=production
          - ARIFOS_QDRANT_URL=http://qdrant:6333
          - ARIFOS_VAULT_PATH=/data/vault999
        volumes:
          - vault-data:/data/vault999
        depends_on:
          - qdrant
        networks:
          - arifos-network

      qdrant:
        image: qdrant/qdrant:latest
        container_name: arifosmcp_qdrant
        restart: unless-stopped
        ports:
          - "127.0.0.1:6333:6333"
        volumes:
          - qdrant-storage:/qdrant/storage
        networks:
          - arifos-network

      nginx:
        image: nginx:alpine
        container_name: arifosmcp_nginx
        restart: unless-stopped
        ports:
          - "443:443"
          - "80:80"
        volumes:
          - ./nginx.conf:/etc/nginx/nginx.conf:ro
          - ./ssl:/etc/nginx/ssl:ro
        depends_on:
          - arifosmcp
        networks:
          - arifos-network

    volumes:
      vault-data:
      qdrant-storage:

    networks:
      arifos-network:
        driver: bridge

## TLS Configuration

Nginx handles TLS termination. Example configuration:

nginx.conf

    server {
        listen 443 ssl http2;
        server_name arifosmcp.yourdomain.com;

        ssl_certificate /etc/nginx/ssl/cert.pem;
        ssl_certificate_key /etc/nginx/ssl/key.pem;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers HIGH:!aNULL:!MD5;

        location / {
            proxy_pass http://arifosmcp:8080;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }
    }

    server {
        listen 80;
        server_name arifosmcp.yourdomain.com;
        return 301 https://$server_name$request_uri;
    }

## Environment Variables

Variable | Description | Default
--- | --- | ---
ARIFOS_ENV | Environment mode (development/production) | development
ARIFOS_QDRANT_URL | Qdrant vector store URL | http://localhost:6333
ARIFOS_VAULT_PATH | Path to VAULT999 ledger storage | ./vault999
ARIFOS_LOG_LEVEL | Logging level (debug/info/warn/error) | info

## Monitoring

arifOS MCP exposes Prometheus metrics at `/metrics` endpoint:

Metrics Example

    # HELP arifos_requests_total Total requests processed
    # TYPE arifos_requests_total counter
    arifos_requests_total{status="seal"} 1523
    arifos_requests_total{status="void"} 47
    arifos_requests_total{status="partial"} 89

    # HELP arifos_latency_seconds Request latency
    # TYPE arifos_latency_seconds histogram
    arifos_latency_seconds_bucket{le="0.1"} 523
    arifos_latency_seconds_bucket{le="0.5"} 1289
    arifos_latency_seconds_bucket{le="1.0"} 1659

Next Steps

Your arifOS MCP server is now ready for production! Check the integrations guide to connect your MCP clients.