Multi-Endpoint Deployment Guide

Batch install and manage Panguard across multiple servers.

Method 1: SSH Batch Install

The simplest approach -- use an SSH loop to install on each server. Best for 5-20 servers.

deploy.sh

#!/bin/bash
# servers.txt: one IP per line
SERVERS="servers.txt"

while IFS= read -r server; do
  echo "Installing on $server..."
  ssh "root@$server" 'curl -fsSL https://get.panguard.ai | bash'
  echo "Starting guard on $server..."
  ssh "root@$server" 'panguard guard start'
done < "$SERVERS"

echo "Done. All endpoints deployed."

Method 2: Ansible Playbook

Automate deployment with Ansible. Best for 20+ servers or environments requiring idempotency.

panguard.yml

# panguard.yml
---
- name: Deploy Panguard
  hosts: all
  become: yes
  tasks:
    - name: Install Panguard
      shell: curl -fsSL https://get.panguard.ai | bash
      args:
        creates: /usr/local/bin/panguard

    - name: Start Guard
      shell: panguard guard start
      args:
        creates: /etc/systemd/system/panguard-guard.service

# Run: ansible-playbook -i inventory.ini panguard.yml

Threat Cloud Multi-Endpoint Integration

All endpoints automatically upload threat intelligence to Threat Cloud. A threat discovered on one server automatically protects all others.

Terminal

# On each endpoint, after install:
panguard login

# Verify connection
panguard status

# View all endpoints in Threat Cloud dashboard
# https://cloud.panguard.ai/endpoints

Free tier supports a single endpoint. Multi-endpoint management requires Starter plan or above.

Deployment Tips

Install in a test environment first to verify no conflicts before deploying to production

Guard's 7-day learning period runs independently on each server

Use panguard scan --json to collect scan results from each server for centralized analysis

Use panguard chat config to set up a unified alert channel (e.g., one Slack channel)

Getting Started Advanced Setup