Install CloudSmith — Azure PaaS

CloudSmith can run as a fully managed Azure PaaS deployment — Azure Container Apps for the API and portal, PostgreSQL Flexible Server for the database, Key Vault for secrets. No on-premises VM required for the control plane.

Choose your deployment method:

Option 1 — Deploy to Azure (Portal wizard)

The fastest path. Click a button, fill in a guided form in the Azure Portal, done in 15 minutes. No command-line tools required.

Deploy to Azure

→ Full wizard guide with field reference

Best for:

  • First-time deployments
  • Teams that prefer a guided UI
  • Environments where CLI access is restricted

Option 2 — Script (recommended CLI option)

A single guided script that auto-generates all secrets and deploys with minimal input. No template files to clone or edit.

Linux / macOS:

curl -fsSL https://raw.githubusercontent.com/cloudsmith-cloud/cloudsmith-installer/main/scripts/install-paas.sh | bash -s -- \
  --owner-email "ops@contoso.com"

Windows (PowerShell 7+):

irm https://raw.githubusercontent.com/cloudsmith-cloud/cloudsmith-installer/main/scripts/Install-CloudSmith-PaaS.ps1 | iex
# You will be prompted for -OwnerEmail if not supplied

Or clone and run locally for more control:

# Linux / macOS
git clone https://github.com/cloudsmith-cloud/cloudsmith-installer
cd cloudsmith-installer
./scripts/install-paas.sh --owner-email "ops@contoso.com" --environment prod

# Windows PowerShell 7+
git clone https://github.com/cloudsmith-cloud/cloudsmith-installer
cd cloudsmith-installer
.\scripts\Install-CloudSmith-PaaS.ps1 -OwnerEmail "ops@contoso.com" -Environment prod

Both scripts auto-generate the master encryption key and database password — you never need to know these values. A cloudsmith-deploy.json file is written to the current directory before deployment so you can review or customise the parameters.

→ Full script reference and Advanced deployment options

Best for:

  • Automated or scripted deployments
  • Multiple instances across environments
  • Infrastructure-as-code workflows
  • Situations requiring exact parameter control (custom tag values, custom image tags)

What both methods deploy

Regardless of which method you choose, the result is identical:

Resource Purpose
Log Analytics Workspace Centralized logging
Application Insights Performance monitoring
User-Assigned Managed Identity Keyless Key Vault access from Container Apps
Key Vault Master encryption key and database password storage
PostgreSQL Flexible Server Platform database
Container Apps Environment Shared networking for containers
Container App — API .NET 9 REST API
Container App — Portal React portal served by nginx

After deployment

Both methods end at the same place: a running CloudSmith instance with a portal URL. Open the portal URL and complete the first-run setup wizard to create your admin account.

Once running:

  1. Install the Relay agent so CloudSmith can reach your on-premises infrastructure
  2. Register your first site and cluster: Operations → Resources → Add site
  3. (Optional) Configure an identity provider: Platform Management → Identity → Identity Providers