This page covers what the appliance is and what to plan for. The commands, tuning
options, and troubleshooting are in the All-in-One guide, which ships in the
documentation bundle for the image version you run. See
Releases.
What it cannot do
The appliance runs one inference worker and one vocoder, a GPU each. It does not autoscale, does not shard across more GPUs or nodes, and does not ship the forced aligner, so it returns no word or segment timings. For elastic or higher-throughput deployments, use the Kubernetes chart, which scales replicas across all GPUs and nodes.What running it involves
Onedocker run on a host that meets the
All-in-One host requirements.
It needs:
- Two GPUs. The first runs the inference worker, the second the vocoder.
- One exposed port for the API.
- One persistent volume. Compile caches, the vocoder’s built engine, reference voice archives, and — on the offline form — the usage ledger all live there. Model weights are in the image, not on the volume.
- The license bundle. A host directory holding the certificate and key pair from Developer → Self Host, mounted read-only. Without it the API never comes up; once the certificate expires the container starts but refuses requests. Renewing is replacing those files in place; only a bundle that carries a new key needs the container restarted.
Usage accounting and tenancy
The form determines how usage is accounted for and what the bearer token has to be. Offline. Usage goes to a local, signed, append-only ledger on the volume. Two consequences worth designing around:- Any non-empty bearer token is accepted; a missing or empty one is rejected. The appliance has nothing to validate a token against.
- The token is recorded verbatim as the billing identity. Use a stable, distinct token per tenant. Two tenants sharing a token are indistinguishable in the ledger.
Capacity
The single worker admits a bounded number of in-flight requests; beyond that, requests queue and time-to-first-audio climbs. The ceiling is set by the worker’s key-value cache VRAM, so larger cards support a higher cap. It is adjustable at launch without rebuilding the image. Validate latency and error rate at any new value before committing to it. Reference-id requests resolve only from local archives placed on the volume, one zip per voice.Next steps
- Requirements: host baseline
- Registry access: how your team gets the image
- Air-gapped deployments: moving the image to a disconnected host

