Sign inGet Control
TALON CONTROL

Download & install

One compose file, one Postgres, your own infrastructure. Four steps from here to a live appliance — no cluster, no queue service, no vendor call.

SELF-HOSTED · AVAILABLE NOW

Run it on your own infrastructure

The Docker image, the compose file below, and a licence key that verifies offline. Your data never leaves your machines — an air-gapped install is a fully licensed install.

Jump to the quickstart
MANAGED CLOUD · REGISTER INTEREST

A guided deploy, on your own cloud account

We'll stand Control up on a cloud account you own — still your instance, still your data, we never operate shared infrastructure holding it. Not available yet; tell us you want it.

beta@talonlabs.dev
BEFORE YOU START
Docker Engine with Compose v2 — the whole appliance is one compose file.
An x86-64 Linux host — 2 vCPU / 4 GB is plenty to start; the image is linux/amd64 (no arm64 build published yet).
A licence key — emailed minutes after purchase. No key yet? Control still runs on the free tier; paste the key whenever it arrives — activation never blocks the install.
QUICKSTART

Four steps to a running appliance

1

Fetch the two files

terminal
mkdir talon-control && cd talon-control
curl -fsSLO https://www.talonlabs.dev/control/docker-compose.yml
curl -fsSL https://www.talonlabs.dev/control/control.env.example -o .env
docker-compose.yml control.env.example
2

Fill in the .env

Four values are required — compose refuses to start without them, deliberately. The template pins a known-good image tag and documents everything optional below the divider.

.env
# three secrets, one command each: openssl rand -hex 32
POSTGRES_PASSWORD=…
AUTH_SECRET=…
TALON_CONTROL_ENCRYPTION_KEY=…
# the public origin your instance will be served on
NEXTAUTH_URL=https://control.your-domain.com

Escrow the encryption key in your password manager before first boot. It encrypts every stored credential; lose it and a restored database is ciphertext.

3

Start it

terminal
docker compose up -d
# migrations run at boot, then the app serves on 127.0.0.1:3001

Open http://localhost:3001 on the host — /setup creates your admin account on first boot. The app binds to loopback only, on purpose: to reach it from anywhere else, put a reverse proxy (Caddy, cloudflared) in front — that proxy's origin is what NEXTAUTH_URL should say.

4

Activate your licence

Paste the key from your email under Settings → License. It's an Ed25519-signed payload verified against our public key, locally — no licence server, no phone-home. A missing or expired key degrades to the free tier; it never locks you out of your own data.

Don't have a licence key yet?

One licence, one self-hosted instance, every update included — the key arrives by email minutes after checkout.

See pricing

Running Kubernetes? A Helm chart ships alongside the appliance — mail beta@talonlabs.dev and we'll set you up. For the longer walkthrough — what a fresh install contains, connecting mail and AI providers, building your fleet — read the install guide.

From checkout to a live appliance in an evening.

Buy the licence, curl two files, compose up — and paste the key that's already in your inbox.

Get Talon Control Read the install guide
Talon Control — Download & install