Relaticle

Prerequisites

You need an active Azure subscription, an SSH key pair, and a VNet with a subnet in the target region.

Standard_B2ms (2 vCPU / 8 GiB RAM) is a good starting size. Scale up for more concurrent users.

Configure the network security group (NSG) to allow inbound 22/tcp from your management network, and 443/tcp (HTTPS) plus 80/tcp (which redirects to HTTPS) from your users.

Step 1 - Deploy from the Azure Marketplace

In the Azure Marketplace, find Relaticle on Ubuntu 24.04 LTS by SecureAnyCloud and choose Get It Now, then Create.

Pick your resource group, region and VM size (Standard_B2ms or larger), and provide your SSH public key. In the networking step, allow inbound 443/tcp and 80/tcp. Then review and create the VM.

Step 2 - Deploy from the Azure CLI

# Accept the Marketplace terms once per subscription (required before the first CLI deploy)
az vm image terms accept --urn sac1647283583153:relaticle-ubuntu-24-04:default:latest
az vm create \
  --resource-group <your-rg> \
  --name relaticle \
  --image sac1647283583153:relaticle-ubuntu-24-04:default:latest \
  --size Standard_B2ms \
  --admin-username azureuser \
  --ssh-key-values ~/.ssh/id_rsa.pub \
  --public-ip-sku Standard

Then open the web ports on the VM's NSG:

az vm open-port --resource-group <your-rg> --name relaticle --port 443 --priority 900
az vm open-port --resource-group <your-rg> --name relaticle --port 80 --priority 901

Step 3 - Connect to your VM

Connect to the VM over SSH:

ssh azureuser@<your-vm-public-ip>

Step 4 - Confirm the services are running

Relaticle runs as five systemd units. PostgreSQL and Redis back the application, and php-fpm executes the Laravel code. nginx terminates TLS on :443, with :80 redirecting to HTTPS. A queue worker processes background jobs and imports.

systemctl is-active postgresql redis-server php8.4-fpm nginx relaticle-worker ss -ltn | grep -E ':(80|443|5432|6379)' curl -ks -o /dev/null -w 'HTTP %{http_code}\n' https://127.0.0.1/sysadmin/login

Step 5 - Retrieve your administrator credentials

On first boot, the VM generates a system administrator account, a PostgreSQL password, a Laravel APP_KEY and Passport OAuth keys. All of them are unique to this VM. The administrator login is written to a root-only file.

The image ships with no administrator account, so there is no default login to change. Read the credentials file as root:

sudo cat /root/relaticle-credentials.txt

The file is 0600 root:root. The password is shown only in this file, so store it in your password manager.

Step 6 - Create your CRM workspace

Relaticle is where your team works day to day. Open https://<your-vm-public-ip>/app in a browser.

The VM uses a per-VM self-signed certificate, so your browser shows a one-time certificate warning on your first visit. Accept it to continue, or install your own domain certificate as described in Step 10.

Choose sign up for an account to register your first user, then create your workspace (team). You land in the CRM home, where you can start adding companies, people and opportunities.

Step 7 - Manage companies, people and opportunities

The CRM organizes your pipeline around Companies, People and Opportunities. Each has customizable fields, list and board views, and CSV import and export.

Add a company, link the people you deal with, and track deals as opportunities through the pipeline stages.

Step 8 - Sign in to the system administration panel

The /sysadmin panel is the instance-level administration console for your VM. Sign in at https://<your-vm-public-ip>/sysadmin. Use the system administrator email and password from /root/relaticle-credentials.txt.

Step 9 - Confirm the version and the stack

Check the installed Relaticle version and the versions of the components it runs on:

grep -m1 '"version"' /var/www/relaticle/composer.json || echo "Relaticle release v3.4.5" php -v | head -1 sudo -u postgres psql -tAc 'SHOW server_version' node -v; nginx -v head -2 /var/www/relaticle/LICENSE

First-boot service and security model

A oneshot systemd unit, relaticle-firstboot.service, runs once on the first boot of each VM. It is ordered After=postgresql.service redis-server.service and Before=nginx.service. It is gated by ConditionPathExists=!/var/lib/sac/data/relaticle-firstboot.done, so it runs exactly once, before the first page is served.

On that first boot, the unit:

• Rotates the PostgreSQL relaticle role password and writes it into the application .env
• Generates a fresh Laravel APP_KEY and a fresh set of Passport OAuth signing keys
• Sets APP_URL to the VM's address, resolved from Azure IMDS
• Generates a per-VM self-signed TLS certificate into /etc/nginx/ssl
• Creates a per-VM system administrator with a random email and password, and writes the login to /root/relaticle-credentials.txt

The administrator and every secret are generated per VM. No two deployments share a credential, and nothing sensitive is baked into the image.

Administration from the CLI

Run Laravel Artisan commands as the www-data user from the application directory:

sudo -u www-data php /var/www/relaticle/artisan about
sudo -u www-data php /var/www/relaticle/artisan queue:work database --once sudo -u www-data php /var/www/relaticle/artisan sysadmin:create --name="Ops" --email="ops@example.com" --password="<choose-a-strong-password>"

Step 10 - Enable HTTPS with your own domain

The image includes a per-VM self-signed certificate, so the panels are served over a secure context out of the box. For production, point a DNS record at the VM and install a certificate from a trusted certificate authority. The simplest option is certbot:

sudo snap install --classic certbot
sudo certbot --nginx -d your-domain.com

Then set APP_URL=https://your-domain.com in /var/www/relaticle/.env and run sudo -u www-data php /var/www/relaticle/artisan optimize:clear.

Backup and maintenance

• Database backup. Run sudo -u postgres pg_dump relaticle > relaticle-$(date +%F).sql
• Application files. The app tree is /var/www/relaticle. User uploads live under /var/www/relaticle/storage/app.
• OS updates. Unattended security upgrades are enabled. Apply full updates with sudo apt-get update && sudo apt-get upgrade.
• Logs. Application logs are at /var/www/relaticle/storage/logs. Read service logs with journalctl -u nginx -u php8.4-fpm -u relaticle-worker.

Support

Every SecureAnyCloud image is backed by 24/7 support. If you need help deploying or operating Relaticle on Azure, contact sales@secureanycloud.com.

Deploy on Azure

Launch Relaticle on Ubuntu 24.04 LTS on Azure with 24/7 support from SecureAnyCloud.

View this image

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com