Requirements
Infrastructure, GitHub, and agent prerequisites for running Tasuku.
Tasuku is an operator-managed system. Prepare the control plane, a public GitHub callback path, and at least one usable agent runtime before enabling repositories.
Required
| Requirement | Why it is needed |
|---|---|
| Docker with Compose | Runs Postgres, migrations, the server, worker, and the bundled Docker agent runtime. |
| Public HTTPS origin | GitHub must reach the webhook and OAuth callback generated from TASUKU_PUBLIC_URL. |
| GitHub account | Creates a GitHub App through Tasuku's manifest flow and installs it on the target owner. |
| Postgres durability | Queue state, credentials, workflow history, and product data live in Postgres. |
| 32-byte master key | Encrypts GitHub App credentials and user-managed secrets at rest. |
| Bootstrap token | Authorizes first-run organization setup and the initial manifest registration. |
| Agent authentication | Codex or Claude must be authenticated inside the selected runtime image or provider. |
Network access
The server needs inbound HTTPS from GitHub. The worker and sandbox need outbound access to clone the primary repository, read approved secondary repositories, call the selected agent provider, and reach configured HTTPS MCP servers.
Tasuku does not accept local or plaintext MCP URLs. Remote MCP servers must use HTTPS.
GitHub permissions
The generated App manifest asks for:
- Email addresses: read
- Contents: read and write
- Issues: read and write
- Pull requests: read and write
It also subscribes to the installation, repository, issue, pull request, review comment, and related events Tasuku uses. Do not reduce these permissions without checking the affected workflow.
Sandbox capacity
Size the runtime for the repositories and toolchains it will execute. The Docker configuration accepts an image plus CPU, memory, and process limits. Daytona and Lambda require their provider-specific connection and runtime fields. See Sandbox providers.
Docker socket trust
The bundled Docker worker controls the host Docker socket. The agent container is hardened, but the worker remains a trusted operator component. Do not expose that socket to untrusted tenants.
Before continuing
Confirm that you can:
- Persist and back up the Postgres volume.
- Preserve the same
TASUKU_MASTER_KEYduring restores. - Route a stable public HTTPS origin to port
8080. - Build or obtain an agent runtime where Codex or Claude is already authenticated.
Then proceed to Installation.