Installation

Production installation guide for JITSudo.

Requirements

PostgreSQL 15+
Go 1.25+ (if building from source)
AWS Identity Center configured in your organization
An OIDC provider (e.g., Okta, Auth0, Google Workspace, Keycloak, Dex)

Deployment Options

Docker Compose

The simplest production deployment. See Docker Compose for details.

From Source

Build all three binaries:

git clone https://github.com/jitsudo/jitsudo.git
cd jitsudo
make build

This produces three binaries in bin/:

Binary	Description
`bin/server`	HTTP API server
`bin/worker`	Background job processor
`bin/migrate`	Database migration runner

Run migrations, then start the server and worker:

./bin/migrate
./bin/server
./bin/worker  # in a separate process

Both the server and worker require the same DATABASE_URL and share most configuration. The worker additionally requires IC_INSTANCE_ARN to provision AWS assignments.

Code Generation

If modifying the API spec or SQL queries, regenerate code:

make generate

This runs two generators:

oapi-codegen — OpenAPI spec → Go server interfaces (internal/api/api.gen.go)
sqlc — SQL queries → type-safe Go database code (internal/store/db/)