Konfigūracijauration Basics
Fluxheim naudoja TOML. Nežinomi laukai atmetami, todėl rašybos klaidos nepraeina prieš restart.
Pagrindinė forma
[server]
listen = ["0.0.0.0:8080"]
default_vhost = "site"
[[vhosts]]
name = "site"
hosts = ["example.com"]Kaip organizuotas config
| Sritis | Kas ten priklauso |
|---|---|
server | Listeners, global limits, trusted proxy handling, and redirects. |
tls | Globali TLS backend ir compatibility policy. |
cache | Process-wide cache defaults and storage tiers. |
vhosts | Hostnames, routes, web roots, proxy settings, PHP, TLS, and access policy. |
metrics | Prometheus ir export listener operaciniam matomumui. |
Route forma
[[vhosts.routes]]
name = "app"
path_prefix = "/app/"
methods = ["GET", "HEAD", "POST"]
max_request_body_bytes = "16MiB"
[vhosts.routes.proxy]
upstreams = ["127.0.0.1:3000"]Route turi vieną matcher ir vieną action. Exact path laimi pirmi, tada ilgiausi prefix, tada regex route, kai regex support įjungtas, tada fallback route.
Saugūs įpročiai
- Vykdyti
fluxheim --check-configprieš reload. - Naudok vieną vhost kiekvienam site arba application boundary.
- Laikyk secret file, environment arba container secrets, o ne public docs.
- Naudok route-level limitus upload ir brangiems application path.
- Laikyk admin ir metrics listener privačius.