Before you begin
- An Apple Silicon Mac; the current package is arm64 only
- The current Community Edition macOS PKG from /download
- Administrator approval to install under /Applications
- One macOS account that will initialize and run the server
- A Terminal window that can remain open while the server runs; the package does not install a background service
Download and verify the package
- 1
Choose the macOS server package
Open /download and select the macOS arm64 PKG under Server Community Edition. It does not support Intel Macs.
- 2
Compare its SHA-256
Open Terminal in the directory containing the downloaded PKG, run shasum, and compare the complete value with the SHA-256 shown for that exact filename on /download.
- 3
Check the package signature
Use pkgutil to inspect the Developer ID signature before installing the package.
The commands below are templates. Replace <VERSION> with the version in the filename shown on /download before copying either block.
PKG="./Orchestris-<VERSION>-macos-arm64.pkg"
test -f "$PKG"
shasum -a 256 "$PKG"
pkgutil --check-signature "$PKG"Install and initialize as one macOS user
- 1
Install the package
Run the installer command from the folder containing the verified PKG. macOS asks for administrator approval and installs the application under /Applications/Orchestris.
- 2
Switch back to the installing user
Run initialization without sudo from the macOS account that will operate the server. Its database and settings are stored in that user's Library folder.
- 3
Complete guided setup
Enter the organization name, administrator email and password, network access, port, and public API origin. Keep the defaults for a server used only on this Mac.
PKG="./Orchestris-<VERSION>-macos-arm64.pkg"
test -f "$PKG"
sudo /usr/sbin/installer -pkg "$PKG" -target /The package payload is installed under /Applications/Orchestris. Initialization and normal server operation are per-user. Run the following commands without sudo from the same macOS account so its state is created under that account's Library directory.
"/Applications/Orchestris/run-orchestris.sh" \
--command local-init \
--interactive-setupThe default is this Mac only on 127.0.0.1:8080 with public origin http://localhost:8080. A successful initialization completes without an error and creates orchestris.env and orchestris.db under ~/Library/Application Support/Orchestris.
Run and verify the foreground server
"/Applications/Orchestris/run-orchestris.sh"Keep this Terminal process open while the server is running. Stop it with Control-C and start it again with the same command. The package supplies no tray application, launchd service, or background service manager.
curl -fsS http://127.0.0.1:8080/health
curl -fsS http://127.0.0.1:8080/app/ >/dev/nullBoth commands should exit without an error. Then open http://localhost:8080/app/ in a browser and confirm that the hosted Chat sign-in page appears.
Know what to back up
| Purpose | Location |
|---|---|
| Installed application | /Applications/Orchestris |
| Secret-bearing configuration | ~/Library/Application Support/Orchestris/orchestris.env |
| SQLite database | ~/Library/Application Support/Orchestris/orchestris.db |
| State and optional log directory | ~/Library/Application Support/Orchestris |
| Automatic upgrade backups | ~/Library/Application Support/Orchestris/backups/upgrade-<timestamp> |
- Purpose
- Installed application
- Location
- /Applications/Orchestris
- Purpose
- Secret-bearing configuration
- Location
- ~/Library/Application Support/Orchestris/orchestris.env
- Purpose
- SQLite database
- Location
- ~/Library/Application Support/Orchestris/orchestris.db
- Purpose
- State and optional log directory
- Location
- ~/Library/Application Support/Orchestris
- Purpose
- Automatic upgrade backups
- Location
- ~/Library/Application Support/Orchestris/backups/upgrade-<timestamp>
Change network configuration deliberately
Loopback access needs no inbound firewall exposure. LAN or reverse-proxy access requires a reviewed bind address, the actual HTTP(S) public API origin, and any required macOS or network firewall rule. The setup checks the listener but does not change firewall settings.
"/Applications/Orchestris/install-orchestris.sh" \
--bind-address 0.0.0.0 \
--port 8080 \
--public-base-url https://ai.example.comRun the configuration command as the same macOS user, review the public origin, then restart the foreground server. Use a real client-visible origin instead of the example value.
"/Applications/Orchestris/run-orchestris.sh" --config-check
"/Applications/Orchestris/run-orchestris.sh" --file-type-detector-check
"/Applications/Orchestris/run-orchestris.sh" --local-search-reranker-checkUpgrade or remove macOS Community Edition
- 1
Stop before upgrading
Use Control-C in the Terminal running Orchestris, then download and verify the newer arm64 PKG.
- 2
Install the newer package
Install it over /Applications/Orchestris. The package replaces its binaries and runtime assets but does not remove per-user state.
- 3
Start as the same user
The next run detects the package version change and backs up the environment, database, WAL, and SHM files that exist. It retains the latest five automatic upgrade backups.
- 4
Verify after upgrade
Run the configuration checks, start the foreground server, and verify /health and /app/. The package does not restart itself or provide automatic rollback.
- 5
Remove the application manually
Stop the foreground server and remove /Applications/Orchestris through Finder or an administrator-managed removal process. The package supplies no uninstaller.
- 6
Decide whether to retain user state
Removing the application does not remove ~/Library/Application Support/Orchestris. Remove each user's state manually only after verifying a backup and deciding that the database, secrets, and upgrade backups are no longer needed.
sudo /usr/sbin/pkgutil --forget com.orchestris.server