Manual setup
Deploy the components in this order — each one needs the previous ones' addresses:
- Keycloak — identity provider
- Airflow — scheduler, Celery broker, Flower
- Model Repository — backend, MongoDB, Elastic stack, Kafka/AKHQ
- Workflow Editor — web UI (and the preview assistant runtime)
- Worker — one per execution host
Create a shared Docker network first if components run on the same host:
docker network create maize-wme-network
Every component reads a .env file next to its docker-compose.yml; copy it from .env.example. All variables are listed in the Configuration reference.
Two secrets must be set correctly:
| Secret | Shared by | Generate with |
|---|---|---|
WME_SERVICE_TOKEN | Backend and every worker | openssl rand -hex 32 |
ASSISTANT_SERVICE_KEY (Preview) | wme-server and assistant-runtime, both read from the backend .env | openssl rand -hex 32 |