Konfiguracijauration Basics
Fluxheim koristi TOML. Nepoznata polja se odbijaju, pa tipfeleri padaju prije restarta.
Glavni oblik
[server]
listen = ["0.0.0.0:8080"]
default_vhost = "site"
[[vhosts]]
name = "site"
hosts = ["example.com"]Kako je config organiziran
| Područje | Što tamo pripada |
|---|---|
server | Listeners, global limits, trusted proxy handling, and redirects. |
tls | Globalna TLS backend i compatibility policy. |
cache | Process-wide cache defaults and storage tiers. |
vhosts | Hostnames, routes, web roots, proxy settings, PHP, TLS, and access policy. |
metrics | Prometheus i export listener za operativnu vidljivost. |
Oblik route
[[vhosts.routes]]
name = "app"
path_prefix = "/app/"
methods = ["GET", "HEAD", "POST"]
max_request_body_bytes = "16MiB"
[vhosts.routes.proxy]
upstreams = ["127.0.0.1:3000"]Route ima jedan matcher i jednu action. Exact path pobjeđuje prvi, zatim najduži prefix, zatim regex route kada je regex support uključen, pa fallback route.
Sigurne navike
- Pokreni
fluxheim --check-configprije reload. - Koristi jedan vhost po site ili application boundary.
- Drži secret u file, environment ili container secrets, ne u public docs.
- Koristi route-level limite za upload i skupe application path.
- Drži admin i metrics listener privatnima.