On-Prem Deployment
Self-hosted Control Seat. The native installer ships with everything inside — embedded PostgreSQL, all services, the gateway UI. Pick the installer for your OS, double-click, and your browser opens to the gateway in ~30 seconds.
Native installer
Download from controlseat.com/download.
| Platform | Installer | What it does |
|---|---|---|
| macOS 11+ | .pkg | Installs to /Applications/Control Seat.app, registers a LaunchAgent so the gateway starts at login. |
| Windows 10 / 11 | .msi | Installs to C:\Program Files\Control Seat\, registers a Windows Service. |
| Linux (Debian / Ubuntu) | .deb | Installs to /usr/lib/controlseat/, creates a systemd unit. |
| Linux (RHEL / Fedora / Rocky) | .rpm | Same as the .deb, for the RPM family. |
Double-click → install → browser opens to http://localhost:8090. No .env editing, no certificate setup, no terminal. PostgreSQL runs embedded inside the install — you don't need to provision a database.
Licensing
Self-hosted deployments use signed license files. Cloud SaaS doesn't run this code path — license-related UI only appears when a license is configured.
Contact us for pricing. We'll set up a controlseat.com account, then you'll mint a license against your specific install.
To activate, open the gateway's Platform → License page and click Activate online. A popup signs the license against your gateway's install ID + host fingerprint and applies it without restart or copy-paste.
Each license is bound to one gateway. Moving to new hardware invalidates the binding by design — re-activation is one click. Past expiry there's a 24-hour grace period, then the gateway shows a renewal prompt. The editor and configuration UI keep working through expiry so you can renew; only runtime endpoints (live tags, historian, runtime page rendering) are gated.
Updates
The gateway's Platform → Updates page shows your current version and a Check for updates button. We don't phone home automatically — only when you click.
To update, re-download the installer from controlseat.com/download and double-click. The new package replaces the binaries, runs migrations, and restarts the service. Your data, license, and TLS certs carry over. To roll back, install the previous version's package.
TLS
The gateway listens on :8090 for HTTP and :8443 for HTTPS. To enable HTTPS, go to Platform → TLS, paste your PEM cert and private key, save. The cert validates on upload and hot-swaps without restart. Private keys are encrypted at rest with the same vault used for datasource secrets.
If you'd rather terminate TLS at a reverse proxy (nginx, Caddy, your existing edge), point it at :8090 and set CS_BASE_URL=https://your-domain so links and redirects use the public URL.
Backup
All durable state lives in one data directory:
| Platform | Path |
|---|---|
| macOS | ~/Library/Application Support/Control Seat/ |
| Windows | %PROGRAMDATA%\Control Seat\ |
| Linux | /var/lib/controlseat/ |
Snapshot this directory and you've snapshotted the whole install — Postgres data, license, TLS cert, configuration. The directory survives updates and rollbacks; it doesn't survive a full uninstall.
Other deployment paths
Docker Compose and air-gapped deployments are supported for shared infrastructure or fully-offline environments. Contact us and we'll send a signed bundle for your specific release.