Download Fluxheim

# 1. 전체 Linux 빌드 tarball 다운로드
# ARM64 server에서는 x86_64-linux 대신 aarch64-linux를 사용하세요.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
  -o fluxheim-1.8.0.tar.gz

# 2. 검증 및 압축 해제
tar xzf fluxheim-1.8.0.tar.gz

# 3. binary와 helper tool을 system path로 이동
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/            # ACME 보조 도구
sudo mv fluxheim-config-tester /usr/local/bin/   # config validator

# 4. config directory 생성 후 config 추가
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml

# 5. config 검증
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml

# 6. 직접 실행(또는 service setup은 Systemd tab 참고)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml

# GHCR image pull (Wasm, full, load-balancer, cache, proxy, PHP variant)
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0         # 전체
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-load-balancer # 로드 밸런서
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-cache   # 캐시 엣지
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-proxy   # 프록시 엣지
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-php     # 관리형 PHP-FPM

# 같은 build set은 Quay에서도 사용 가능
podman pull quay.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull quay.io/valkyoth/fluxheim:v1.8.0-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.8.0-cache
podman pull quay.io/valkyoth/fluxheim:v1.8.0-proxy
podman pull quay.io/valkyoth/fluxheim:v1.8.0-php

# rootless 실행 — internal port 8080 및 8443
podman run -d \
  --name fluxheim \
  --restart unless-stopped \
  -p 8080:8080 \
  -p 8443:8443 \
  -v /srv/sites:/srv/sites:ro \
  -v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
  -v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
  ghcr.io/valkyoth/fluxheim:v1.8.0

# log 확인
podman logs -f fluxheim

# tarball에는 hardened systemd unit이 포함됨
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/

# fluxheim system user 생성
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim

# directory 설정
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim

# systemd reload 및 service enable
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim

# status 확인
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f

# Fluxheim은 guided certificate setup용 acme-init을 포함함
# Let's Encrypt 사용(HTTP-01)
sudo fluxheim acme-init letsencrypt

# Actalis (무료 EAB 지원 issuer)
sudo fluxheim acme-init actalis

# companion tool fluxheim-acme가 다음의 renewal 처리
# container 및 external service-manager deployment
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload

[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]

[vhosts.tls]
enabled = true

[vhosts.tls.acme]
enabled = true
# 발급자: issuer = "letsencrypt"