cd keys
./setup.sh
This produces validation.key (private, keep it safe) and validation.key.pub..env file in the repo root to override any of the variables consumed by docker-compose.yml (for example GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REDIRECT_URL, PUBLIC_TRUSTED_ENTITY_APP_URL, etc.).docker compose up --build
The stack exposes:
http://localhost:4173 → Community Frontendhttp://localhost:4174 → Trusted Entity AppBoth the backend and the trusted-entity app mount the ./keys directory, so make sure the generated files stay there (or update the compose file to point somewhere else). Set real Google OAuth credentials before attempting to log in through oauth.