Installation Guide
For IT Teams — v1.0
February 2026
For IT Administrators

Server Installation
Guide

Everything your IT team needs to deploy Rendex on your firm's server. One person, one terminal, under 30 minutes.

What's in this guide

1. What You're InstallingOverview + architecture
2. Server RequirementsHardware + software prereqs
3. Pre-Flight CheckAutomated readiness scan
4. InstallationStep-by-step walkthrough
5. Health CheckVerify everything works
6. Post-InstallFirst login + TLS certs
7. UninstallingClean removal
8. TroubleshootingCommon issues + fixes
i

We're on the call with you. We schedule a Zoom call during installation and walk through every step together. This guide is a reference — you won't be doing this alone.

Estimated time: 20–30 minutes (first install)

Skill level: Basic Linux terminal (copy-paste commands)

Support: info@rendex.ai

Installation Guide
For IT Teams — v1.0

1 What You're Installing

Rendex is a private AI system that runs entirely on your server. It indexes your firm's documents and lets attorneys ask questions in plain English, with every answer citing the exact source document, section, and page. Nothing ever leaves your network.

The system consists of five services, all running as Docker containers on a single machine:

ServiceWhat It DoesPort (Internal)
NginxHTTPS reverse proxy, TLS termination, rate limiting80, 443
Chat UIWeb application (Express.js) — the interface attorneys use3000
PostgreSQLUser accounts, permissions, matters, audit log5432 (localhost only)
QdrantVector database — stores document embeddings for search6333 (internal only)
OllamaLocal AI models — runs on GPU for embedding + generation11434 (internal only)

Network posture: Only ports 80 (redirects to 443) and 443 are exposed. PostgreSQL is bound to localhost. Qdrant and Ollama are only accessible within the Docker network. Zero outbound connections. You can verify this with a packet capture.

The deployment kit

You'll receive a folder (via secure transfer or USB) containing everything needed:

rendex-deploy/ install.sh ← Main installer (run this) preflight.sh ← Pre-install system check health-check.sh ← Post-install verification uninstall.sh ← Clean removal docker-compose.yml ← Container orchestration .env.template ← Reference (installer generates the real .env) chat-ui/ ← Application source + Dockerfile nginx/ ← Reverse proxy config postgres/ ← Database schema (init.sql)

2 Server Requirements

Minimum spec

OSUbuntu 22.04 LTS
GPUNVIDIA, 8+ GB VRAM
RAM32 GB
Storage100 GB free (SSD)
CPU8 cores

Recommended spec

OSUbuntu 22.04 LTS
GPUNVIDIA RTX 4070+, 16 GB VRAM
RAM64 GB
Storage500 GB NVMe
CPU12+ cores

Required software (pre-installed)

The pre-flight check will verify all of these, but here's what you need before starting:

SoftwareInstall CommandVerify
Docker Engine curl -fsSL https://get.docker.com | sh docker --version
Docker Compose Included with Docker Engine 23.0+ docker compose version
NVIDIA Driver sudo apt install nvidia-driver-535 nvidia-smi
NVIDIA Container Toolkit See docs.nvidia.com/datacenter/... docker run --gpus all nvidia/cuda:12.0-base nvidia-smi
curl, openssl sudo apt install curl openssl curl --version
!

GPU is required. The AI models run on the NVIDIA GPU. Without a GPU, document processing and query response will be extremely slow (10–30x slower). Intel/AMD GPUs are not currently supported.

Installation Guide
For IT Teams — v1.0

3 Pre-Flight Check

Before installing, run the pre-flight script to verify your server meets all requirements. This checks hardware, software, and network readiness.

$ chmod +x preflight.sh install.sh health-check.sh uninstall.sh $ ./preflight.sh

The script checks the following and prints a pass/fail table:

CheckRequirementIf It Fails
Operating SystemUbuntu/Debian-based LinuxInstall Ubuntu 22.04 LTS
CPU Cores8+ cores (12+ recommended)Use a more capable server
RAM32 GB+ (64 GB recommended)Add more memory
Disk Space100 GB+ freeFree space or add a drive
NVIDIA GPU8+ GB VRAMInstall an NVIDIA GPU
NVIDIA Drivernvidia-smi workssudo apt install nvidia-driver-535
Docker EngineInstalled and runningcurl -fsSL https://get.docker.com | sh
Docker Composev2+ availableUpdate Docker Engine
NVIDIA Container ToolkitGPU passthrough worksInstall nvidia-container-toolkit
Ports 80 & 443Not in useStop Apache/Nginx or reassign ports
curl & opensslAvailable on PATHsudo apt install curl openssl

Example output

RENDEX SYSTEMS — PRE-FLIGHT CHECK ============================================ Operating System INFO Detected: Ubuntu 22.04.4 LTS PASS Supported Linux distribution CPU INFO Detected: 12 cores PASS CPU cores: 12 (recommended: 12+) Memory INFO Detected: 62 GB PASS RAM: 62 GB (recommended: 64 GB) NVIDIA GPU INFO Detected: NVIDIA GeForce RTX 4070 (12288 MB) PASS GPU VRAM: 12288 MB (minimum: 8192 MB) ... ============================================ 10 passed | 1 warning | 0 failed ============================================
i

Warnings are OK. The installer will proceed with warnings (e.g., non-Ubuntu distro, slightly under recommended RAM). It will only abort on failures (missing GPU, Docker not installed, etc.).

4 Installation (Step by Step)

Once the pre-flight passes, run the installer:

$ ./install.sh

The installer runs through 7 automated steps. Here's exactly what happens at each one:

Step 1 of 7 — Pre-flight (automatic)

Re-runs the pre-flight check. Aborts if any critical check fails.

Step 2 of 7 — Configuration prompts

The installer asks for four pieces of information:

PromptExampleNotes
Firm nameMorrison & Callahan LLPUsed in the TLS certificate and UI branding
Admin emailjsmith@morrison.comThis is the first login account
Admin password(hidden input)Minimum 12 characters, confirmed twice
Server hostname/IP192.168.1.50Auto-detects your IP; press Enter to accept
!

Save these credentials. The admin email and password are needed to log in. The installer does not store or display the password after setup. If lost, it must be reset via the database.

Installation Guide
For IT Teams — v1.0

Step 3 of 7 — Generate secure configuration

The installer generates cryptographically random secrets and writes them to a .env file (chmod 600, root-only readable):

JWT Secret64-char random hex
PostgreSQL Password32-char random base64

These secrets are generated locally using openssl rand. They are never transmitted anywhere.

Step 4 of 7 — Generate TLS certificate

A self-signed TLS certificate is generated for the hostname/IP you provided. This enables HTTPS immediately.

TypeRSA 2048-bit, X.509
Validity10 years
Certificatenginx/certs/rendex.pem
Private keynginx/certs/rendex-key.pem
i

Certificate warning: Browsers will show a security warning for self-signed certificates. This is expected. Click "Advanced" then "Proceed" (Chrome) or "Accept the Risk" (Firefox). You can replace this with your firm's CA-signed certificate at any time — see page 4.

Step 5 of 7 — Download and build containers

The installer pulls Docker images from Docker Hub and builds the application container. This is the longest step on a first install (10–20 minutes depending on internet speed).

ImageSourceApproximate Size
ollama/ollamaDocker Hub~800 MB + models (~4 GB)
qdrant/qdrantDocker Hub~150 MB
postgres:16-alpineDocker Hub~80 MB
nginx:alpineDocker Hub~25 MB
rendex-chat-uiBuilt locally from source~300 MB

After the initial download, all images are cached locally. Subsequent starts are instant.

Step 6 of 7 — Start services

Docker Compose starts all five containers. The installer waits for each service to become healthy:

Starting Rendex... Waiting for database............. ready Creating admin account... done Waiting for vector database... ready Waiting for AI models (this takes a few minutes on first run)... ready Waiting for application....... ready Waiting for HTTPS............ ready
!

AI model download: On first install, Ollama downloads two models (~4.5 GB total): llama3 (language model) and nomic-embed-text (embedding model). This can take 5–10 minutes. The installer shows progress and will notify you if it's still loading.

Step 7 of 7 — Health check (automatic)

The installer automatically runs the health check to verify all services. See section 5 for details.

Installation complete

When everything succeeds, you'll see:

============================================ RENDEX IS INSTALLED ============================================ Access: https://192.168.1.50 Login: jsmith@morrison.com Password: (the password you entered during setup) Your browser will show a certificate warning — this is normal with a self-signed certificate. Click 'Advanced' → 'Proceed'. Next steps: 1. Open the URL above in Chrome 2. Log in with your admin credentials 3. Create matters and upload documents 4. Start asking questions Support: info@rendex.ai
Installation Guide
For IT Teams — v1.0

5 Health Check

Run the health check at any time to verify all services are operational:

$ ./health-check.sh

It verifies:

CheckWhat It Tests
ContainersAll 5 Docker containers are in "running" state
PostgreSQLAccepting connections + schema initialized (7+ tables)
QdrantAPI responding on port 6333
OllamaAPI responding + both AI models loaded (llama3, nomic-embed-text)
GPUNVIDIA GPU is being utilized by Ollama
Chat UIApplication responding on /health endpoint
HTTPSNginx serving TLS on port 443

6 Post-Install

First login

1. Open https://<your-server-ip> in Chrome or Firefox.
2. Accept the self-signed certificate warning (Advanced → Proceed).
3. Log in with the admin email and password you set during installation.
4. Create your first matter (case/project) and upload documents.

Replacing the TLS certificate

To use your firm's CA-signed certificate instead of the self-signed one:

# 1. Place your certificate and key: cp your-cert.pem nginx/certs/rendex.pem cp your-key.pem nginx/certs/rendex-key.pem # 2. Restart Nginx: docker compose restart nginx

Service management

# Start Rendex (if server was rebooted): docker compose up -d # Stop Rendex: docker compose down # View logs for a specific service: docker compose logs -f chat-ui docker compose logs -f ollama # Restart a single service: docker compose restart chat-ui
i

Auto-start on reboot: Docker is configured to restart containers automatically. If the server reboots, Rendex will start on its own. Verify with ./health-check.sh after any reboot.

7 Uninstalling

If the pilot doesn't convert, or you need to remove Rendex for any reason:

$ ./uninstall.sh

The uninstaller will:

1. Stop and remove all Docker containers.
2. Ask whether to keep or delete firm data (database, documents, vectors, AI models).
   — Deleting data requires typing DELETE as confirmation. Default is to preserve data.
3. Optionally remove Docker images to reclaim disk space.
4. Print instructions for removing the install directory.

!

Data deletion is permanent. If you choose to delete firm data, all documents, database records, user accounts, and the audit log are irreversibly removed. We recommend backing up the Docker volumes before uninstalling if there's any chance you'll need the data later.

8 Troubleshooting

ProblemSolution
Pre-flight: NVIDIA GPU not detectedInstall the NVIDIA driver: sudo apt install nvidia-driver-535, then reboot.
Pre-flight: Docker GPU test failsInstall NVIDIA Container Toolkit: sudo apt install nvidia-container-toolkit, then sudo systemctl restart docker.
Port 80/443 already in useStop Apache (sudo systemctl stop apache2) or other web servers using those ports.
AI models "still loading" after 15+ minCheck internet connection. Models download from Ollama's CDN. Run docker compose logs -f ollama to see progress.
Chat UI won't startCheck logs: docker compose logs chat-ui. Usually a missing .env variable or database connection issue.
Certificate warning won't go awayThis is expected with self-signed certs. Replace with a CA-signed certificate (see Post-Install section).
Slow query responsesVerify GPU is being used: nvidia-smi should show Ollama process. If CPU-only, response times will be 10–30x slower.
Server rebooted, can't access RendexDocker should auto-restart containers. If not: docker compose up -d from the install directory.
Need to reset admin passwordContact info@rendex.ai — we'll walk you through a database password reset.

Questions? Stuck on something?

Email info@rendex.ai or call us during your scheduled deployment Zoom.

We respond to installation issues within 2 hours during business hours.