Manyfold

Replace <vm-ip> with the public IP of your VM. The default login user is azureuser.

ssh azureuser@<vm-ip>

sudo systemctl is-active docker.service nginx.service manyfold.service
sudo ss -tlnp | grep -E ':80 |:3214 '

You should see active printed three times. The ss output shows nginx listening publicly on port 80. The app is bound to the loopback interface only, on 127.0.0.1:3214, so nginx is the only service exposed on the public interface.

grep image /opt/manyfold/docker-compose.yml cd /opt/manyfold && sudo docker compose ps --format "table {{.Name}}\t{{.Image}}\t{{.Status}}"

You should see the pinned image tags and the three containers, manyfold-app-1, manyfold-postgres-1 and manyfold-redis-1, all in the Up state.

All stateful Manyfold data lives on a dedicated data disk mounted at /var/lib/manyfold. This includes the database, the rendered thumbnails and your uploaded model files.

findmnt /var/lib/manyfold df -h /var/lib/manyfold

findmnt shows the device backing /var/lib/manyfold, and df confirms the 40 GiB volume.

The nginx reverse proxy serves an unauthenticated static /health endpoint on port 80. The Manyfold app redirects the site root to the sign-in page when you are not logged in.

curl -s http://localhost/health
curl -s -o /dev/null -w "%{http_code}\n" http://localhost/

/health returns OK and / returns 302 (a redirect to the sign-in page). This confirms that nginx and the app are both up and that access is authenticated.

Your instance generates a unique administrator username, email and password on first boot and writes them to a root-only file.

sudo cat /root/manyfold-credentials.txt

The file lists MANYFOLD_URL (where to sign in), MANYFOLD_ADMIN_USERNAME, MANYFOLD_ADMIN_EMAIL and MANYFOLD_ADMIN_PASSWORD. Store the password somewhere safe.

Open http://<vm-ip>/ in your browser. You are redirected to the sign-in page. Enter the MANYFOLD_ADMIN_EMAIL and MANYFOLD_ADMIN_PASSWORD from Step 6 and sign in.

You can also verify the login from the command line against the Devise sign-in form. A correct password is accepted with a 303 redirect to the dashboard:

EMAIL=$(sudo grep '^MANYFOLD_ADMIN_EMAIL=' /root/manyfold-credentials.txt | cut -d= -f2-)
PASS=$(sudo grep '^MANYFOLD_ADMIN_PASSWORD=' /root/manyfold-credentials.txt | cut -d= -f2-)
JAR=$(mktemp)
TOKEN=$(curl -s -c "$JAR" http://localhost/users/sign_in | grep -oE 'name="authenticity_token"[^>]*value="[^"]+"' | head -1 | sed -E 's/.*value="([^"]+)".*/\1/')
curl -s -b "$JAR" -c "$JAR" -o /dev/null -w "%{http_code}\n" -X POST http://localhost/users/sign_in \
  --data-urlencode "authenticity_token=$TOKEN" \
  --data-urlencode "user[email]=$EMAIL" \
  --data-urlencode "user[password]=$PASS"

A 303 confirms the per-VM administrator authenticates end to end.

After you sign in, you land on your library. The Models grid shows every model in the library with a rendered thumbnail created by the background worker. A default library at /libraries is ready for you to fill with your own models.

Open a model to see its files, metadata, tags and a larger interactive render:

Open Settings (the gear icon) to manage your libraries, appearance, mesh analysis and plugins. Because multi-user mode is enabled, you can also manage user accounts and moderation. The Libraries page shows the storage service, path and model counts for each library.

To add your own 3D models, upload them from the web UI with Add content. Alternatively, copy files into a library folder on the data disk and run a Scan from the settings page. Manyfold imports the models, and the render workers generate their thumbnails.

Sign in to the AWS Management Console, open the EC2 service and select Launch instance. Under Application and OS Images, choose AWS Marketplace AMIs and search for Manyfold. Select the SecureAnyCloud listing, choose Select, then choose Continue on the subscription summary.

Pick an instance type of m5.large or larger. Choose your EC2 key pair under Key pair (login). Under Network settings, select your VPC and subnet. Create or select a security group that allows inbound port 22 from your management network and inbound ports 80 and 443 from the networks your users will use. Leave the root and data volumes at their default sizes or larger.

Select Launch instance. First-boot initialisation takes a couple of minutes after the instance state becomes Running and the status checks pass. During that time, the stack rotates its secrets, recreates the database and creates your administrator account.

This command launches an instance from the SecureAnyCloud Manyfold Marketplace AMI into an existing subnet and security group. Replace <ami-id> with the AMI ID shown on the Marketplace listing and <key-name> with your EC2 key pair name. Replace <subnet-id> with your subnet ID and <security-group-id> with a security group that opens ports 22, 80 and 443.

aws ec2 run-instances \
  --image-id <ami-id> \
  --instance-type m5.large \
  --key-name <key-name> \
  --subnet-id <subnet-id> \
  --security-group-ids <security-group-id> \
  --metadata-options "HttpTokens=required,HttpEndpoint=enabled" \
  --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value=manyfold}]'

sudo systemctl is-active docker.service nginx.service manyfold.service
sudo ss -tlnp | grep -E ':80 |:3214 '

You should see active printed three times. The ss output shows nginx listening publicly on port 80. The app is bound to the loopback interface only, on 127.0.0.1:3214, so nginx is the only service exposed on the public interface.

grep image /opt/manyfold/docker-compose.yml cd /opt/manyfold && sudo docker compose ps --format "table {{.Name}}\t{{.Image}}\t{{.Status}}"

You should see the pinned image tags, manyfold3d/manyfold:0.146.0, postgres:15 and redis:7.2-alpine, and the three containers, manyfold-app-1, manyfold-postgres-1 and manyfold-redis-1, all in the Up state.

All stateful Manyfold data lives on a dedicated EBS volume mounted at /var/lib/manyfold. This includes the database, the rendered thumbnails and your uploaded model files.

findmnt /var/lib/manyfold df -h /var/lib/manyfold

findmnt shows the device backing /var/lib/manyfold, and df confirms the 40 GiB volume.

The nginx reverse proxy serves an unauthenticated static /health endpoint on port 80. The Manyfold app redirects the site root to the sign-in page when you are not logged in.

curl -s http://localhost/health
curl -s -o /dev/null -w "%{http_code}\n" http://localhost/

/health returns OK and / returns 302 (a redirect to the sign-in page). This confirms that nginx and the app are both up and that access is authenticated.

Your instance generates a unique administrator username, email and password on first boot and writes them to a root-only file.

sudo cat /root/manyfold-credentials.txt

The file lists MANYFOLD_URL (where to sign in), MANYFOLD_ADMIN_USERNAME, MANYFOLD_ADMIN_EMAIL and MANYFOLD_ADMIN_PASSWORD. Store the password somewhere safe.

Open http://<public-ip>/ in your browser. You are redirected to the sign-in page. Enter the MANYFOLD_ADMIN_EMAIL and MANYFOLD_ADMIN_PASSWORD from Step 7 and sign in.

You can also verify the login from the command line against the Devise sign-in form. A correct password is accepted with a 303 redirect:

EMAIL=$(sudo grep '^MANYFOLD_ADMIN_EMAIL=' /root/manyfold-credentials.txt | cut -d= -f2-)
PASS=$(sudo grep '^MANYFOLD_ADMIN_PASSWORD=' /root/manyfold-credentials.txt | cut -d= -f2-)
JAR=$(mktemp)
TOKEN=$(curl -s -c "$JAR" http://localhost/users/sign_in | grep -oE 'name="authenticity_token"[^>]*value="[^"]+"' | head -1 | sed -E 's/.*value="([^"]+)".*/\1/')
curl -s -b "$JAR" -c "$JAR" -o /dev/null -w "%{http_code}\n" -X POST http://localhost/users/sign_in \
  --data-urlencode "authenticity_token=$TOKEN" \
  --data-urlencode "user[email]=$EMAIL" \
  --data-urlencode "user[password]=$PASS"

A 303 confirms the per-instance administrator authenticates end to end.

After you sign in, you land on the dashboard, with a search box across your whole library and a recent-activity feed. The top bar gives you Models, Creators and Collections, plus Add content and Scan to bring your models in.

The Models page is your library grid. A fresh appliance starts empty, with a default library at /libraries ready for you to fill. Once you add models, the grid shows a rendered thumbnail for each one, created by the background worker.

Open Site Settings (the gear icon) to manage your libraries, file settings, appearance, mesh analysis and plugins. Because multi-user mode is enabled, you can also manage user accounts and moderation. The statistics tiles summarise your models, files, creators, collections, accounts and tags.

To add your own 3D models, upload them from the web UI with Add content. Alternatively, copy files into a library folder on the data volume and run a Scan from the settings page. Manyfold imports the models, and the render workers generate their thumbnails.