Polytomic's Enterprise plan offers an on-premise deployment in the form of a Docker container that runs in your private cloud, wholly self-contained. Contact us through our website to learn more: https://www.polytomic.com/contact.
- Ability to run Docker containers
- Ability to expose running Polytomic container to external traffic with SSL/TLS termination
- Databases, as indicated in the next section.
- A Google OAuth Client, for authentication.
In order to deploy Polytomic, you should sort out a few things to make the deploy proceed as smoothly as possible.
- Get access to the Polytomic ECR on AWS.
- Receive your Deployment Key from Polytomic.
- Prepare a PostgreSQL database of at least version 11. The user should have superuser rights to the database. If you are using a deployment platform (e.g. Heroku, Aptible, etc), you may choose to set those up in the course of deployment.
- Prepare a Redis deployment. If you are using a deployment platform (e.g. Heroku, Aptible, etc), you may choose to set those up in the course of deployment.
- Setup a Google OAuth client (necessary for the Polytomic app to provide sign-in).
Please see our on-prem repo on GitHub. Specific instructions for each deployment platform are maintained there.
We ship Polytomic On Premises as a Docker image. To pull the latest version of the software, use the following image name:
Polytomic accepts configuration via environment variables. The following are required:
ROOT_USERThe email address to use when starting for the first time; this user will be able to add additional users and configure Polytomic.
DEPLOYMENTA unique identifier for your on premises deploy, provided by Polytomic.
DEPLOYMENT_KEYThe license key for your deployment, provided by Polytomic.
DATABASE_URLConnection URL for Polytomic’s database; should be in the form of
REDIS_URLConnection URL for Redis; should be in the form of
For SSL/TLS connections specify the protocol as:
Note: this was previously named
CACHE_URL; Polytomic will still use that environment variable if
REDIS_URLis unset, however it is deprecated and will be removed in a future version.
POLYTOMIC_URLBase URL for accessing Polytomic; for example,
https://polytomic.mycompany.com. This will be used when redirecting back from Google and other integrations after authenticating with OAuth.
GOOGLE_CLIENT_SECRETGoogle OAuth Client ID and secret, obtained by creating a OAuth 2.0 Client ID
Your valid redirect URLs must include
The following environment variables may also be specified:
LOG_LEVELControls the logging output; valid values are
error; the default is
infoif not specified.
LONGSYNC_THRESHOLDControls how many minutes a sync may run for before an email is sent. Email recipients are those on the Sync Error notification list. Default is 0 (disabled).
VALID_ORIGINSA comma delimited list of valid HTTP origins;
POLYTOMIC_URLis automatically added to this list.
EXECUTION_LOG_BUCKETAn AWS S3 bucket name. For example,
polytomic-execution-logs. The bucket stores log files containing the records involved in a sync execution. Record logging is enabled from the Settings page within the app. Credentials for AWS are pulled through the AWS-SDK's credential chain, and the user/role must have permissions for the bucket. We recommended setting a bucket lifecycle rule to automatically expire objects.
EXECUTION_LOG_REGIONThe AWS S3 region for the execution log bucket. For example
EXPORT_QUERY_BUCKETAn AWS S3 bucket name. For example,
polytomic-export-query. The bucket is used to store query exports run using Polytomic's SQL Runner. Credentials for AWS are pulled through the AWS-SDK's credential chain, and the user/role must have permissions for the bucket. We recommended setting a bucket lifecycle rule to automatically expire objects.
EXPORT_QUERY_REGIONThe AWS S3 region for the export query bucket. For example
The Polytomic On Premises image exposes a health-check endpoint at
/status.txt which can be used to verify the container is up and running.
Polytomic runs database migrations on startup. Therefore the database user accessing the Polytomic database will need permission to create and alter the schema.
Polytomic uses GSuite for authenticating users. The first user email address is set via the
ROOT_USER environment variable. This user will be able to add additional users through the web interface.
Note that you only need to add users who will be setting up connections and syncs to Polytomic.
Polytomic On Premises makes the following outbound requests:
- Periodic requests to
ping.polytomic.comto verify your license is valid and to record usage telemetry; telemetry does not include any personally identifiable information.
- Application traces are sent to DataDog; these may include queries executed, but do not contain variables used while processing the pipeline. These traces help us understand how Polytomic is performing.
- Errors are sent to Sentry.io when they occur to assist us with debugging; error payloads do not contain values used to trigger the sync.
Some integrations require additional configuration when running on premises. See the integrations documentation for more information.
Updated 24 days ago