Production-ready TAK Server deployment scripts for Rocky Linux 9 and Ubuntu 22.04, plus an optional Docker workflow using the official takserver-docker-*.zip from TAK.gov.
Automated installation, SSL configuration, and comprehensive monitoring for TAK Server deployments. Created and maintained by The TAK Syndicate.
Three simple steps to deploy TAK Server:
# 1. Download scripts
git clone https://github.com/takwerx/tak-server-installer.git
cd tak-server-installer
# 2. Choose your OS and run install script
# Rocky Linux 9:
sudo ./rocky-9/install.sh
# Ubuntu 22.04:
sudo ./ubuntu-22.04/install.sh
# 3. (Optional) Add SSL and hardening
sudo ./rocky-9/caddy-setup.sh # or ubuntu-22.04/caddy-setup.sh
sudo ./rocky-9/hardening.sh # or ubuntu-22.04/hardening.shDocker (optional): use the official Docker ZIP, then run ./docker/tak-docker-install.sh (see DEPLOYMENT-GUIDE.md).
That's it! Your TAK Server is running at https://YOUR-IP:8443
📖 Read the complete deployment guide for detailed instructions.
- ✅ Automated TAK Server installation
- ✅ PostgreSQL 15 setup and configuration
- ✅ Custom Root CA and Intermediate CA naming
- ✅ Certificate creation with proper keystores
- ✅ Firewall configuration
- ✅ Auto-start on boot
- ✅ All certificates use standard password:
atakatak
- ✅ Let's Encrypt SSL certificates
- ✅ Automatic certificate renewal
- ✅ Domain name configuration
- ✅ Secure HTTPS access
- ✅ No manual certificate management
- ✅ 7 Active Guard Dogs monitoring your server
- ✅ Automatic restart on failures
- ✅ Email & SMS alerts
- ✅ Network connectivity monitoring
- ✅ Process health checks
- ✅ PostgreSQL monitoring
- ✅ Disk space monitoring
- ✅ Certificate expiry alerts
- ✅ Health endpoint for UptimeRobot
- ✅ Production-grade reliability
- Fresh VPS with Rocky Linux 9, RHEL 9, or Ubuntu 22.04
- 8GB RAM minimum (16GB recommended)
- 50GB storage minimum (100GB+ recommended)
- 4 CPU cores minimum
- Root/sudo access
- TAK Server package from TAK.gov
- Domain name
- DNS A record pointing to your VPS
tak-server-installer/
├── rocky-9/
│ ├── install.sh # TAK Server installation
│ ├── caddy-setup.sh # SSL/Let's Encrypt setup
│ └── hardening.sh # Production hardening & monitoring
├── ubuntu-22.04/
│ ├── install.sh # TAK Server installation
│ ├── caddy-setup.sh # SSL/Let's Encrypt setup
│ └── hardening.sh # Production hardening & monitoring
├── docker/
│ ├── tak-docker-install.sh # Install from takserver-docker-*.zip
│ └── docker-compose.yml # Optional stack after images are built
├── docs/
│ └── guard-dogs.md # Guard Dog monitoring explained
├── DEPLOYMENT-GUIDE.md # Complete deployment guide
├── QUICK-START.md # Fast deployment instructions
└── README.md # This file
Installs TAK Server, PostgreSQL, creates certificates, configures firewall.
Rocky Linux 9:
sudo ./rocky-9/install.shUbuntu 22.04:
sudo ./ubuntu-22.04/install.shWhat it does:
- Installs all dependencies
- Sets up PostgreSQL 15
- Creates custom Root and Intermediate CAs
- Generates admin and user certificates
- Configures firewall (ports 8089, 8443, 8446)
- Starts TAK Server
Access: https://YOUR-IP:8443 (certificate: /opt/tak/certs/files/admin.p12, password: atakatak)
Adds Let's Encrypt SSL certificate for your domain.
Rocky Linux 9:
sudo ./rocky-9/caddy-setup.shUbuntu 22.04:
sudo ./ubuntu-22.04/caddy-setup.shWhat it does:
- Installs Caddy
- Obtains Let's Encrypt certificate
- Configures automatic renewal
- Updates TAK Server to use SSL cert
Access: https://yourdomain.com:8443
Adds production-grade monitoring and reliability.
Rocky Linux 9:
sudo ./rocky-9/hardening.shUbuntu 22.04:
sudo ./ubuntu-22.04/hardening.shWhat it does:
- Configures systemd for auto-restart
- Sets up 4GB swap space
- Tunes TCP keepalive settings
- Installs 7 Guard Dog monitors
- Configures email/SMS alerts
- Creates health endpoint (port 8080)
Guard Dogs Monitor:
- Port 8089 health (every 1 min)
- TAK processes (every 1 min)
- Network connectivity (every 1 min)
- PostgreSQL service (every 5 min)
- Out of Memory detection (every 1 min)
- Disk space (every hour)
- Certificate expiry (daily)
- Complete Deployment Guide - Step-by-step instructions with troubleshooting (includes Docker with the official Docker ZIP)
- Quick Start Guide - Fast deployment for experienced users
- TAK Server Configuration Guide (PDF) - Official TAK Product Center reference (e.g. §6 Docker install); confirm current revision on TAK.gov
- Guard Dogs Explained - Understanding the monitoring system
All certificates use the standard TAK Server password: atakatak
This includes:
admin.p12(administrator certificate)user.p12(standard user certificate)- All keystores and truststores
Important: Change this in production if required by your security policy.
The scripts automatically configure these ports:
- 8089/tcp - TLS client connections
- 8443/tcp - Admin web interface
- 8446/tcp - Certificate enrollment
- 80/tcp - HTTP (only if using Caddy for SSL)
- 443/tcp - HTTPS (only if using Caddy for SSL)
- 8080/tcp - Health endpoint (only if using hardening)
The hardening script installs 7 active guard dogs that monitor your TAK Server 24/7:
| Guard Dog | Checks | Interval | Action |
|---|---|---|---|
| Port 8089 | Port accepting connections | 1 min | Auto-restart after 3 failures |
| Process Monitor | All 5 Java processes running | 1 min | Auto-restart after 3 failures |
| Network | Internet connectivity | 1 min | Alert after 3 failures |
| PostgreSQL | Database service status | 5 min | Auto-restart if down |
| OOM Detection | Java memory crashes | 1 min | Auto-restart on OOM |
| Disk Space | Storage usage > 90% | 1 hour | Alert only |
| Certificate Expiry | Cert expires in < 30 days | Daily | Alert only |
Features:
- ✅ 15-minute grace period after restarts (prevents false alarms)
- ✅ Email & SMS alerts
- ✅ Comprehensive logging
- ✅ Failure thresholds prevent false positives
Created by The TAK Syndicate
- 🌐 Website: https://www.thetaksyndicate.org
- 📺 YouTube: @TheTAKSyndicate
- 📧 Email: thetaksyndicate@gmail.com
- Check the Deployment Guide
- Review Common Issues
- Search existing GitHub Issues
- Open a new issue if needed
MIT License - See LICENSE file for details.
Free to use, modify, and distribute. Attribution appreciated!
- TAK Server by TAK Product Center
- Scripts by The TAK Syndicate
- Community contributions welcome!
If these scripts helped you deploy TAK Server, please star this repository!
It helps others find it and motivates continued development.
Latest Update: January 2026
Compatible with: TAK Server 5.x series
Tested on: Rocky Linux 9, RHEL 9, Ubuntu 22.04 LTS; Docker path uses the official container bundle from TAK.gov