Conspectus
Aspectus celer quomodo Fluxheim in deployment productionis appareat.
Reverse proxy modulare, conditorium, aequator oneris et hospes staticus scriptus in Rust. Praedefinite tutus cum TLS, ACME, compressione, consilio liminali, inventione upstream dynamica et traffic mirroring tuto inclusis.
include_conf_d = false
[server]
listen = ["0.0.0.0:80"]
tls_listen = ["0.0.0.0:443"]
default_vhost = "fluxheim.eu"
[tls]
enabled = true
backend = "rustls"
profile = "intermediate"
min_protocol = "tls1.2"
alpn = "http1-and-http2"
curve_preferences = ["X25519", "CurveP256", "CurveP384"]
[[vhosts]]
name = "fluxheim.eu"
hosts = ["fluxheim.eu"]
[vhosts.tls]
enabled = true
[vhosts.tls.certificate]
cert_path = "/etc/fluxheim/tls/fluxheim.eu/fullchain.pem"
key_path = "/etc/fluxheim/tls/fluxheim.eu/privkey.pem"
[vhosts.web]
root = "/srv/sites/fluxheim.eu"
index_files = ["index.html"]Fluxheim venit ut aedificationes modulatae intentae — utere tantum iis quae deployatio tua requirit.
In Rust scriptus cum toolchain stabili fixo. Nulli buffer overflows, nullus use-after-free, nullae data races ex constructione.
Runtime liminale Rust-nativum cum connection pooling, upstream retries, health checks activis, HTTP/2, WebSocket upgrades et gRPC pass-through.
Compilatio Wasm propria ex plena forma productionis, cum hamis normarum circumscriptis, ACME, mensuris atque OpenTelemetry.
Binarium et imago aequatoris oneris 1.5 intenta cum electione provecta, persistentia locali, consilio salutis/ejectionis, queueing terminato et moderaminibus membrorum tempore runtime.
Compila tantum quod opus est. Profile intenta pro situ statico, cache edge, reverse proxy, load balancing, TCP stream proxying, PHP-FPM, GeoIP, traffic mirroring et fasciculis productionis cum compressione.
rustls-first cum OpenSSL sustentato et viis probationis FIPS/ISO, authenticatione testimonii clientis, mTLS upstream, editione ACME automatica et SNI multi-cert.
Backends conditorii in memoria, disco, stratis et encrypta cum gzip, Zstandard et Brotli cache-tutis, atque range caching pro magnis obiectis.
Imagines Podman sine radice pro Wolfi, Alpine, SUSE Micro et Debian. Systemd/RPM pro deploymentis nativis. Nulla externa assets in initio.
Listener metricorum Prometheus opt-in, exportatio metricorum OTLP, propagatio contextus trace et exportatio trace OTLP ad plenam observabilitatem.
Quaestiones MMDB locales optionales pro consilio patriae et ASN utens MaxMind GeoIP2/GeoLite2 aut datasetis CIRCL Geo Open. Nulla quaestio remota aut downloader in tramite petitionis.
Servitia TCP L4 rudia cum itineribus stream dedicatis, limitibus veris idle/lifetime/byte, moderaminibus TLS/mTLS upstream, consilio weighted/drain/backup et PROXY protocol locali itineris.
Pons PHP-FPM FastCGI opt-in pro applicationibus front-controller sicut WordPress. Resolutio scripti stricta et tractatio petitionum terminata.
ACLs trusted-proxy-aware, rate limits, auth subrequests, traffic mirroring, regex rewrites, queues terminatae, validatio config stricta et tractatio petitionum roborata.
Download a pre-built binary, drop in a config file, and start serving. Native systemd units and container images included.
# Deprime et extrahe aedificationem plenam
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
| tar xz
# Move binarium ad semitam systematis
sudo mv fluxheim /usr/local/bin/
# Valida config tuum ante initium
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml
# Curre cum systemd (unit file inclusus)
sudo systemctl enable --now fluxheim# Trahe e GHCR aut Quay
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0
# Curre sine radice cum config tuo montato
podman run -d \
--name fluxheim \
-p 8080:8080 -p 8443:8443 \
-v /srv/sites:/srv/sites:ro \
-v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
ghcr.io/valkyoth/fluxheim:v1.8.0
# Variationes imaginum praesto: full, load-balancer, cache, proxy, wasm, php# Clona et aedifica profile praedefinitum
git clone https://github.com/valkyoth/fluxheim
cd fluxheim
# Aedificatio praedefinita (proxy + web + cache + tls-rustls + security)
cargo build --release
# Aut aedifica profile intentum
cargo build --release --no-default-features \
--features profile-proxy-edge,acme-client
# Valida config et curre
cargo run --release -- \
--check-config --config examples/fluxheim.tomlAedificatus operatoribus qui stack modernum et audibile volunt sine moribus legacy occultis.
Validatio config stricta est. Optiones ambiguae aut non tutae reiciuntur, non tacite accipiuntur.
Aedificationes reproducibiles. Omnis dependentia fixa est. cargo audit and cargo deny run in CI.
Curre sine radice. Portus interni 8080/8443 praedefinite. Imagines runtime explicitae pro variis consiliis operationalibus.
Licentia copyleft compatibilis cum multis licentiis OSS. In UE orta, legaliter clara ad usum gubernationis et societatum.
Aspectus celer quomodo Fluxheim in deployment productionis appareat.