Production AI Wallet Deployment: GHCR Image with Auto-Provision and Secrets

Description and use

Automated deployment of the WAIaaS AI wallet in Docker with auto‑generated master password, secure secret handling, and health checks.

Problem

Deploy a self-hosted AI wallet so private keys never leave the server and avoid manual password setup.

Outcome

A fully automated, self‑hosted AI wallet stack that keeps private keys local, manages secrets securely, and provides health‑check and restart capabilities.

Workflow

• Clone the WAIaaS repo
• Run docker compose up -d to start the daemon
• Retrieve the auto‑generated master password from /data/recovery.key
• Store the password securely
• Create a wallet via POST /v1/wallets with X-Master-Password header
• Configure RPC endpoints via environment variables or .env file
• Use Docker Secrets overlay to keep master password out of env vars
• Set up reverse proxy if needed, binding to 127.0.0.1:3100
• Enable restart: unless-stopped for uptime

Evidence

The daemon generates a cryptographically random password and writes it to /data/recovery.key

Source

WAIaaS supports Docker Secrets through a docker-compose.secrets.yml overlay file

Source