# Documenso Self-Hosted — sign.basicconsulting.no

# Documenso Self-Hosted — sign.basicconsulting.no

## Service Details

- **Service:** Documenso v2.x (open-source document signing)
- **URL:** https://sign.basicconsulting.no
- **DNS:** A record → 4.223.110.181 (Azure VM, proxied via Cloudflare)
- **Hosting:** Azure VM (swedencentral)

## Admin Credentials

- **Email:** alem@alai.no
- **Password:** (stored in Vault: "Documenso - sign.basicconsulting.no")
- **Vault item password:** Cemerika\_!950

## API Integration

- **API Token:** api\_xn907c9xczrteoba (created 2026-04-19 for Bilko Sign integration)
- **API Base URL:** https://sign.basicconsulting.no/api/v1

### Test cURL

```
curl -H "Authorization: api_xn907c9xczrteoba" \
  https://sign.basicconsulting.no/api/v1/documents

# Expected response:
{"documents":[],"totalPages":0}

```

## Bilko Sign Integration

Documenso is used as the signing backend for Bilko (accounting SaaS).

- **Spec:** ~/ALAI/products/Bilko/docs/product/BILKO-SIGN-SPEC.md
- **Integration team:** Skybound (mobile + frontend specialists)

### GCP Secret Manager

- **Secret name:** bilko-documenso-api-key
- **Value:** api\_xn907c9xczrteoba
- **Bound to:** bilko-api Cloud Run service (revision 00045-flz)
- **Environment variable:** DOCUMENSO\_API\_KEY

### bilko-api Environment Variables

```
DOCUMENSO_API_URL=https://sign.basicconsulting.no
DOCUMENSO_API_KEY=(from GCP Secret Manager)

```

## Incident History

### 2026-04-18: 404 Error

**Symptom:** sign.basicconsulting.no returned 404 Not Found

**Root cause:** Cloudflare Tunnel ingress had route to localhost:3003 but cloudflared could not reach backend

**Fix:** Changed DNS from tunnel CNAME to direct A record → 4.223.110.181 (proxied)

**Result:** Documenso Sign In page now live

## Maintenance

### Backup API Tokens

- Store all API tokens in Vault immediately after creation
- Documenso does NOT allow viewing tokens after creation (one-time display)

### Version Updates

```
# Check current version
curl -s https://sign.basicconsulting.no/api/health | jq .version

# Update (on Azure VM)
ssh -i ~/.ssh/azure_alai alai-admin@4.223.110.181
cd /path/to/documenso
docker-compose pull
docker-compose up -d

```

## Future Migration

Target: **sign.alai.no** (part of ALAI domain migration)

- See [ALAI Domain Migration runbook](/link/2666)
- Requires: alai.no NS change on one.com (pending as of 2026-04-19)

## See Also

- [ALAI Domain Migration](/link/2666)
- Bilko Sign spec: ~/ALAI/products/Bilko/docs/product/BILKO-SIGN-SPEC.md

*Created: 2026-04-19 | API token created: 2026-04-19 | Incident fixed: 2026-04-18*