Complete Installation and Deployment Guide for Production Environments
Version 1.0 | Last Updated: December 30, 2025
CNPERP is a web-based ERP system with a client-server architecture designed for multi-user environments.
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ Client PC 1 │ │ Client PC 2 │ │ Client PC N │
│ (Browser) │ │ (Browser) │ │ (Browser) │
└────────┬────────┘ └────────┬────────┘ └────────┬────────┘
│ │ │
└───────────────────────┴───────────────────────┘
│
Network/LAN
│
┌────────────┴────────────┐
│ Server Machine │
│ ┌──────────────────┐ │
│ │ FastAPI Backend │ │
│ │ (Port 8010) │ │
│ └──────────────────┘ │
│ ┌──────────────────┐ │
│ │ PostgreSQL DB │ │
│ │ (Port 5432) │ │
│ └──────────────────┘ │
│ ┌──────────────────┐ │
│ │ Static Files │ │
│ └──────────────────┘ │
└─────────────────────────┘
| Component | Minimum | Recommended |
|---|---|---|
| CPU | Dual-core | Quad-core |
| RAM | 4 GB | 8 GB |
| Display | 1366x768 | 1920x1080 |
| Network | 100 Mbps | 1 Gbps |
| Browser | Chrome 90+, Firefox 88+, Edge 90+, Safari 14+ | |
Python 3.11+
python --versionPostgreSQL 15+
# Run as Administrator in PowerShell
New-NetFirewallRule -DisplayName "CNPERP Application" `
-Direction Inbound -LocalPort 8010 -Protocol TCP -Action Allow
New-NetFirewallRule -DisplayName "PostgreSQL Database" `
-Direction Inbound -LocalPort 5432 -Protocol TCP -Action Allowsudo nano /etc/netplan/00-installer-config.yamlnetwork:
version: 2
ethernets:
ens33:
dhcp4: no
addresses: [192.168.1.100/24]
gateway4: 192.168.1.1
nameservers:
addresses: [8.8.8.8, 8.8.4.4]sudo netplan apply# Update system
sudo apt update && sudo apt upgrade -y
# Install Python 3.11
sudo apt install python3.11 python3.11-venv python3-pip -y
# Install PostgreSQL
sudo apt install postgresql postgresql-contrib -y
# Install Git and dependencies
sudo apt install git build-essential libpq-dev -ysudo ufw allow 8010/tcp comment 'CNPERP Application'
sudo ufw allow 5432/tcp comment 'PostgreSQL Database'
sudo ufw allow 22/tcp comment 'SSH'
sudo ufw enable
sudo ufw statusWindows:
cd "C:\Program Files\PostgreSQL\15\bin"
psql -U postgresLinux:
sudo -u postgres psqlSQL Commands (Both platforms):
-- Create database
CREATE DATABASE cnperp_production;
-- Create user with strong password
CREATE USER cnperp_user WITH PASSWORD 'YourStrongPassword123!';
-- Grant privileges
GRANT ALL PRIVILEGES ON DATABASE cnperp_production TO cnperp_user;
-- Connect to database
\c cnperp_production
-- Grant schema privileges
GRANT ALL ON SCHEMA public TO cnperp_user;
GRANT ALL PRIVILEGES ON ALL TABLES IN SCHEMA public TO cnperp_user;
GRANT ALL PRIVILEGES ON ALL SEQUENCES IN SCHEMA public TO cnperp_user;
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO cnperp_user;
ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO cnperp_user;
-- Exit
\qWindows:
New-Item -ItemType Directory -Path "C:\CNPERP" -Force
cd C:\CNPERP
git clone https://github.com/yourorg/cnperp-dimensions.git .
# OR extract ZIP file to C:\CNPERPLinux:
sudo mkdir -p /opt/cnperp
sudo chown $USER:$USER /opt/cnperp
cd /opt/cnperp
git clone https://github.com/yourorg/cnperp-dimensions.git .Windows:
cd C:\CNPERP
python -m venv .venv
.\.venv\Scripts\Activate.ps1Linux:
cd /opt/cnperp
python3.11 -m venv .venv
source .venv/bin/activatepip install --upgrade pip
pip install -r requirements.txtCreate .env file:
# Database Configuration
DATABASE_URL=postgresql://cnperp_user:YourStrongPassword123!@localhost:5432/cnperp_production
# Application Settings
APP_NAME=CNPERP
ENVIRONMENT=production
DEBUG=False
# Security
SECRET_KEY=your-secret-key-here-change-this-in-production
JWT_SECRET_KEY=your-jwt-secret-key-here-change-this
ACCESS_TOKEN_EXPIRE_MINUTES=30
# Server Configuration
HOST=0.0.0.0
PORT=8010
# CORS Settings
ALLOWED_ORIGINS=http://192.168.1.100:8010,http://localhost:8010# Run migrations
alembic upgrade head
# Create admin user
python scripts/create_admin.py# Start application manually
uvicorn app.main:app --host 0.0.0.0 --port 8010
# Test in browser
# Navigate to: http://localhost:8010From client workstation:
# Test network connectivity
ping 192.168.1.100
# Test port accessibility
telnet 192.168.1.100 8010
# Test application
curl http://192.168.1.100:8010/api/v1/healthhttp://192.168.1.100:8010Windows:
"C:\Program Files\Google\Chrome\Application\chrome.exe" --app=http://192.168.1.100:8010
CNPERP ERPWindows - Restrict to LAN:
New-NetFirewallRule -DisplayName "CNPERP - LAN Only" `
-Direction Inbound -LocalPort 8010 -Protocol TCP `
-Action Allow -RemoteAddress 192.168.1.0/24Linux - Restrict to LAN:
sudo ufw delete allow 8010/tcp
sudo ufw allow from 192.168.1.0/24 to any port 8010 proto tcpWindows - PowerShell Script:
$timestamp = Get-Date -Format "yyyyMMdd_HHmmss"
$backupFile = "C:\CNPERP\backups\cnperp_$timestamp.backup"
$pgDumpPath = "C:\Program Files\PostgreSQL\15\bin\pg_dump.exe"
New-Item -ItemType Directory -Path "C:\CNPERP\backups" -Force
& $pgDumpPath -h localhost -U cnperp_user -F c -b -v `
-f $backupFile cnperp_production
# Delete backups older than 30 days
Get-ChildItem "C:\CNPERP\backups" -Filter "*.backup" |
Where-Object { $_.LastWriteTime -lt (Get-Date).AddDays(-30) } |
Remove-Item
Write-Host "Backup completed: $backupFile"Linux - Bash Script:
#!/bin/bash
TIMESTAMP=$(date +%Y%m%d_%H%M%S)
BACKUP_DIR="/opt/cnperp/backups"
BACKUP_FILE="$BACKUP_DIR/cnperp_$TIMESTAMP.backup"
mkdir -p $BACKUP_DIR
pg_dump -h localhost -U cnperp_user -F c -b -v \
-f $BACKUP_FILE cnperp_production
# Delete backups older than 30 days
find $BACKUP_DIR -name "*.backup" -mtime +30 -delete
echo "Backup completed: $BACKUP_FILE"Windows - Task Scheduler: Schedule the PowerShell script to run daily at 2 AM
Linux - Crontab:
crontab -e
# Add this line:
0 2 * * * /opt/cnperp/backup_database.sh >> /opt/cnperp/logs/backup.log 2>&1Symptoms: Clients cannot reach http://192.168.1.100:8010
Solutions:
# Check if service is running (Windows)
Get-Service CNPERP
# Check if service is running (Linux)
sudo systemctl status cnperp
# Check if port is listening
netstat -an | findstr "8010" # Windows
sudo netstat -tlnp | grep 8010 # Linux
# Test from server
curl http://localhost:8010/api/v1/health
# Test network from client
ping 192.168.1.100
telnet 192.168.1.100 8010Symptoms: "Could not connect to database" errors
Solutions:
psql -h localhost -U cnperp_user -d cnperp_production
Symptoms: Pages load slowly, timeouts
Solutions:
For additional support: