admin-server

Overview ¶

Command admin-server is the standalone Nucleus admin observability server. It accepts AgentService streams from agents (one per framework process) and ControlService unary/server-streaming calls from the embedded web UI.

Configuration sources, in order of precedence:

1. Command-line flags
2. Environment variables (NUCLEUS_ADMIN_*)
3. Built-in defaults (see admin/server.Config.withDefaults)

Two listeners run by default:

• --agent-addr (default :9090) — h2c by default; TLS when --agent-cert and --agent-key are supplied; mutual TLS (client certificates required and verified) when --agent-client-ca is supplied as well. With no --agent-token and no client-certificate requirement the server refuses to start unless the address is loopback or --insecure-agent-listener is passed (see server.Run).
• --ui-addr (default :8080) — h2c + embedded UI; trusted-proxy headers and bearer fallback per --ui-* flags. --ui-proxy-secret adds a shared secret the proxy must echo before its identity header is trusted.

A third, opt-in listener serves Prometheus /metrics (+/healthz) when --metrics-addr is set; empty (the default) disables it.

Run "admin-server --help" for the full surface.