Konfigurācijauration Basics
Fluxheim izmanto TOML. Nezināmi lauki tiek noraidīti, tāpēc pārrakstīšanās kļūdas izgāžas pirms restartēšanas.
Pamata forma
[server]
listen = ["0.0.0.0:8080"]
default_vhost = "site"
[[vhosts]]
name = "site"
hosts = ["example.com"]
Kā config ir organizēts
| Joma | Kas tur pieder |
|---|---|
server | Listeners, global limits, trusted proxy handling, and redirects. |
tls | Globāls TLS backend un compatibility policy. |
cache | Process-wide cache defaults and storage tiers. |
vhosts | Hostnames, routes, web roots, proxy settings, PHP, TLS, and access policy. |
metrics | Prometheus un export listeneri operational visibility vajadzībām. |
Route forma
[[vhosts.routes]]
name = "app"
path_prefix = "/app/"
methods = ["GET", "HEAD", "POST"]
max_request_body_bytes = "16MiB"
[vhosts.routes.proxy]
upstreams = ["127.0.0.1:3000"]
Route ir viens matcher un viena action. Exact path uzvar pirmais, tad garākie prefix, tad regex route, ja regex atbalsts ir ieslēgts, un tad viens fallback route.
Droši ieradumi
- Palaist
fluxheim --check-configpirms reload. - Izmanto vienu vhost katrai vietnei vai lietotnes robežai.
- Turi secrets failos, environment vai container secrets, nevis publiskā dokumentācijā.
- Izmanto route-level limitus uploadiem un dārgiem application pathiem.
- Turi admin un metrics listenerus privātus.