# Our reference deployment

Download a sanitized core setup derived from the maintained deployment, with topology, configuration and checks.

## Download the complete directory

Download [dicto-reference-setup-1.1.0.zip](/downloads/dicto-reference-setup-1.1.0.zip)
and its [SHA-256 checksum](/downloads/dicto-reference-setup-1.1.0.zip.sha256).
The archive includes an independent README, configuration, Compose definitions,
schemas and per-file checksums. No private source checkout is needed.

```sh
sha256sum --check dicto-reference-setup-1.1.0.zip.sha256
unzip dicto-reference-setup-1.1.0.zip
cd dicto-reference-setup
sha256sum --check checksums.sha256
```

On macOS, use `shasum -a 256 -c` in place of `sha256sum --check`.
Download individual files from the links below if you want to review before
extracting. Never overlay this example onto an existing installation's data.

## What this represents

This is a sanitized **core profile** derived from the maintained deployment
snapshot recorded in [versions.yaml](/examples/reference/versions.yaml).
It retains the `/api` and `/management/` topology, PostgreSQL/RustFS,
API/migrator/jobs roles, and separate inference services behind a gateway.
It uses an isolated project/network and example hostname instead of production
identities, shared data-volume names, credentials and internal network details.

The portable transcription recipe substitutes public Whisper weights and the
standard vLLM audio runtime for the maintained private checkpoint/patches.
It does not promise token logprobs, realtime or diarization. The core profile
omits organization-specific SSO/passkeys, plugins, document workers, additional
AI models and the separate Scripto agent runtime. See the
[version and validation notes](/reference/versions.md) before adopting it.

## Layout

| File/directory | Purpose |
| --- | --- |
| [README.md](/examples/reference/README.md) | Standalone ordered installation instructions |
| [compose.yaml](/examples/reference/compose.yaml) | Core services and optional inference gateway |
| [secrets.env.example](/examples/reference/secrets.env.example) | Required operator-supplied values |
| [server/server.yaml](/examples/reference/server/server.yaml) | Shared API/jobs/migrator configuration |
| [app-management/public.env](/examples/reference/app-management/public.env) | Public management browser configuration |
| [config/app.yaml](/examples/reference/config/app.yaml) | Managed desktop configuration |
| [database/Dockerfile](/examples/reference/database/Dockerfile) | PostgreSQL and migration-required extensions |
| [transcription/compose.yaml](/examples/reference/transcription/compose.yaml) | Optional Whisper GPU service |
| [transcription/Dockerfile](/examples/reference/transcription/Dockerfile) | Audio dependencies for pinned vLLM |
| [llm/compose.yaml](/examples/reference/llm/compose.yaml) | Optional GPT-OSS GPU service |
| [llm-server/models.json](/examples/reference/llm-server/models.json) | Gateway aliases and upstream model IDs |
| [monitoring/compose.yaml](/examples/reference/monitoring/compose.yaml) | Optional Prometheus service |
| [monitoring/prometheus.yaml](/examples/reference/monitoring/prometheus.yaml) | Internal metrics scrape target |
| [proxy/README.md](/examples/reference/proxy/README.md) | Routing and existing-proxy adaptation |
| [checks/README.md](/examples/reference/checks/README.md) | Commands, expected results and limitations |

The archive and individual downloads are generated from the same reviewed files.
Generated hashes are also available in the [setup index](/setup/index.json).

## Continue with a recipe

Choose [existing AI endpoints](/install/external-ai.md) or
[self-hosted Whisper and LLM](/install/self-hosted-ai.md). Both describe their required
inputs, startup order and verification without requiring private source access.