Documenso Self-Hosted — sign.basicconsulting.no

Documenso Self-Hosted — sign.basicconsulting.no

Service Details

• Service: Documenso v2.x (open-source document signing)
• URL: https://sign.basicconsulting.no
• DNS: A record → 4.223.110.181 (Azure VM, proxied via Cloudflare)
• Hosting: Azure VM (swedencentral)

Admin Credentials

• Email: alem@alai.no
• Password: (stored in Vault: "Documenso - sign.basicconsulting.no")
• Vault item password: Cemerika_!950

API Integration

• API Token: api_xn907c9xczrteoba (created 2026-04-19 for Bilko Sign integration)
• API Base URL: https://sign.basicconsulting.no/api/v1

Test cURL

curl -H "Authorization: api_xn907c9xczrteoba" \
  https://sign.basicconsulting.no/api/v1/documents

# Expected response:
{"documents":[],"totalPages":0}

Bilko Sign Integration

Documenso is used as the signing backend for Bilko (accounting SaaS).

• Spec: ~/ALAI/products/Bilko/docs/product/BILKO-SIGN-SPEC.md
• Integration team: Skybound (mobile + frontend specialists)

GCP Secret Manager

• Secret name: bilko-documenso-api-key
• Value: api_xn907c9xczrteoba
• Bound to: bilko-api Cloud Run service (revision 00045-flz)
• Environment variable: DOCUMENSO_API_KEY

bilko-api Environment Variables

DOCUMENSO_API_URL=https://sign.basicconsulting.no
DOCUMENSO_API_KEY=(from GCP Secret Manager)

Incident History

2026-04-18: 404 Error

Symptom: sign.basicconsulting.no returned 404 Not Found

Root cause: Cloudflare Tunnel ingress had route to localhost:3003 but cloudflared could not reach backend

Fix: Changed DNS from tunnel CNAME to direct A record → 4.223.110.181 (proxied)

Result: Documenso Sign In page now live

Maintenance

Backup API Tokens

• Store all API tokens in Vault immediately after creation
• Documenso does NOT allow viewing tokens after creation (one-time display)

Version Updates

# Check current version
curl -s https://sign.basicconsulting.no/api/health | jq .version

# Update (on Azure VM)
ssh -i ~/.ssh/azure_alai alai-admin@4.223.110.181
cd /path/to/documenso
docker-compose pull
docker-compose up -d

Future Migration

Target: sign.alai.no (part of ALAI domain migration)

• See ALAI Domain Migration runbook
• Requires: alai.no NS change on one.com (pending as of 2026-04-19)

See Also

• ALAI Domain Migration
• Bilko Sign spec: ~/ALAI/products/Bilko/docs/product/BILKO-SIGN-SPEC.md

Created: 2026-04-19 | API token created: 2026-04-19 | Incident fixed: 2026-04-18