headmesh-server

Overview ¶

Command headmesh-server runs the Headmesh control server: the public REST API and the mutual-TLS endpoint cell agents dial into.

headmesh-server serve [-recovery]     run the API and the cell endpoint (-recovery after a restore)
headmesh-server migrate               apply database migrations (as the schema owner)
headmesh-server bootstrap ...         create a cell, an org and an admin API key
headmesh-server keygen -out FILE      create the Ed25519 operation-signing key
headmesh-server ca-init -dir DIR      create the CA that signs cell client certificates
headmesh-server cell-cert -dir DIR -cell NAME   issue a client certificate for a cell agent

Configuration comes from HEADMESH_* environment variables (see config.go).