Azure Installation

Broch is available in the Azure Marketplace as a solution template. Deploying from the Marketplace creates all required resources in your own Azure subscription — Broch has no access to your environment.

Prerequisites

• Azure subscription with permissions to create Container Apps, databases, and managed identities
• Wildcard domain & DNS configured
• TLS certificate (PFX format, base64-encoded)
• Identity provider app registration created
• License key obtained

Deploy from the Marketplace

Search for Broch in the Azure Marketplace and click Create. The deployment wizard walks you through all required parameters.

The template deploys Broch on Azure Container Apps with Azure Database for PostgreSQL Flexible Server. All resources are created within a resource group you specify.

Post-Deployment DNS

After deployment, the template outputs the Container App FQDN. Create a wildcard CNAME pointing to it:

*.tunnels.company.com  →  your-app.region.azurecontainerapps.io

Verify

curl https://tunnels.company.com/healthz
curl https://tunnels.company.com/health/ready

Upgrading

az containerapp update \
  --name <app-name> \
  --resource-group <resource-group> \
  --image ghcr.io/broch-io/broch:<new-version>

Database migrations run automatically on startup.

Azure VM

If you prefer to run on an Azure VM rather than Container Apps, use the Docker Compose installation guide — it works on any Linux VM including Azure.