Download Fluxheim

# 1. Scarrica 'o tarball d'a build Linux cumpleta
# Usa aarch64-linux invece 'e x86_64-linux sui server ARM64.
curl -L https://github.com/valkyoth/fluxheim/releases/download/v1.8.0/fluxheim-1.8.0-full-x86_64-linux.tar.gz \
  -o fluxheim-1.8.0.tar.gz

# 2. Verifica e scumpatta
tar xzf fluxheim-1.8.0.tar.gz

# 3. Sposta binario e strumenti helper dint' 'o percorso 'e sistema
sudo mv fluxheim /usr/local/bin/
sudo mv fluxheim-acme /usr/local/bin/            # Compagno ACME
sudo mv fluxheim-config-tester /usr/local/bin/   # Validatore cunfigurazione

# 4. Crea 'a directory 'e cunfigurazione e aggiungi 'o tuo config
sudo mkdir -p /etc/fluxheim /srv/fluxheim
sudo cp packaging/default/fluxheim.toml /etc/fluxheim/fluxheim.toml

# 5. Valida 'a cunfigurazione
fluxheim --check-config --config /etc/fluxheim/fluxheim.toml

# 6. Esegui direttamente (o vedi 'a scheda Systemd pe 'o servizio)
sudo fluxheim --config /etc/fluxheim/fluxheim.toml

# Scarrica image GHCR (Wasm, varianti full, load-balancer, cache, proxy e PHP)
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0         # cumpleta
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-load-balancer # bilanciatore 'e carico
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-cache   # profilo cache edge
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-proxy   # profilo proxy edge
podman pull ghcr.io/valkyoth/fluxheim:v1.8.0-php     # PHP-FPM gestito

# Lo stesso set 'e build è disponibile su Quay
podman pull quay.io/valkyoth/fluxheim:v1.8.0
podman pull quay.io/valkyoth/fluxheim:v1.8.0-wasm
podman pull quay.io/valkyoth/fluxheim:v1.8.0-load-balancer
podman pull quay.io/valkyoth/fluxheim:v1.8.0-cache
podman pull quay.io/valkyoth/fluxheim:v1.8.0-proxy
podman pull quay.io/valkyoth/fluxheim:v1.8.0-php

# Esegue rootless — porte interne 8080 e 8443
podman run -d \
  --name fluxheim \
  --restart unless-stopped \
  -p 8080:8080 \
  -p 8443:8443 \
  -v /srv/sites:/srv/sites:ro \
  -v /srv/fluxheim/certs:/etc/fluxheim/certs:rw \
  -v ./fluxheim.toml:/etc/fluxheim/fluxheim.toml:ro \
  ghcr.io/valkyoth/fluxheim:v1.8.0

# Controlla 'e log
podman logs -f fluxheim

# Il tarball include un'unità systemd hardened
sudo cp packaging/systemd/fluxheim.service /etc/systemd/system/

# Crea l'utente 'e sistema fluxheim
sudo useradd -r -s /sbin/nologin -d /var/lib/fluxheim fluxheim

# Prepara 'e directory
sudo mkdir -p /etc/fluxheim /srv/fluxheim /var/log/fluxheim
sudo chown fluxheim:fluxheim /srv/fluxheim /var/log/fluxheim

# Ricarica systemd e abilita 'o servizio
sudo systemctl daemon-reload
sudo systemctl enable --now fluxheim

# Controlla 'o stato
sudo systemctl status fluxheim
sudo journalctl -u fluxheim -f

# Fluxheim include acme-init pe configurare 'e certificate guidati
# Issuer Let's Encrypt (HTTP-01)
sudo fluxheim acme-init letsencrypt

# Actalis (issuer gratuito cu EAB)
sudo fluxheim acme-init actalis

# Lo strumento companion fluxheim-acme gestisce 'o rinnovamiento per
# deployment container e service manager esterni
fluxheim-acme status
fluxheim-acme renew
fluxheim-acme reload

[[vhosts]]
name = "site"
hosts = ["example.com", "www.example.com"]

[vhosts.tls]
enabled = true

[vhosts.tls.acme]
enabled = true
# issuer configurato: issuer = "letsencrypt"