rapadura serve
Run the gateway (API, hosted MCP, docs). Runs on the VM, not on laptops.
Synopsis
serve runs the rapadura gateway. Every flag can also be set through the environment variable named next to it, which is how the systemd unit configures it (EnvironmentFile=/etc/rapadura/gateway.env).
rapadura serve [flags]
Options
--bootstrap-owner string GitHub login that becomes owner on first login (RAPADURA_BOOTSTRAP_OWNER)
--data-dir string data root (RAPADURA_DATA_DIR) (default "/srv/rapadura")
--docs-dir string directory served under /docs/ (RAPADURA_DOCS_DIR)
--downloads-dir string directory served under /dl/ (RAPADURA_DL_DIR)
--github-client-id string GitHub OAuth app client id with device flow enabled (RAPADURA_GITHUB_CLIENT_ID)
-h, --help help for serve
--hestia-allowlist string server-wide hostname list for collision checks (RAPADURA_HESTIA_ALLOWLIST) (default "/var/www/internal/allowed-domains.txt")
--listen string HTTP listen address (RAPADURA_LISTEN) (default "127.0.0.1:8090")
--max-archive-mb int max site size in MB (RAPADURA_MAX_ARCHIVE_MB) (default 500)
--max-sites int sites per staff user (RAPADURA_MAX_SITES) (default 20)
--nginx-listen string listen address for generated server blocks; must match the other vhosts (RAPADURA_NGINX_LISTEN) (default "192.168.99.106:80")
--nginx-mode string live or dryrun (RAPADURA_NGINX_MODE) (default "live")
--previews serve slug--vN preview hosts; needs wildcard certificates (RAPADURA_PREVIEWS)
--public-url string public base URL (RAPADURA_PUBLIC_URL) (default "https://agents.rapadura.net")
--real-ip-from string edge proxy IP whose X-Forwarded-For sets the client IP in site logs (RAPADURA_REAL_IP_FROM) (default "192.168.99.135")
--regen-allowlist string script to run after the allowlist changes (RAPADURA_REGEN_ALLOWLIST) (default "/usr/local/sbin/gen-allowed-domains.sh")
--sudo string sudo binary for nginx -t / reload; empty when running as root (RAPADURA_SUDO) (default "/usr/bin/sudo")
--token-ttl duration lifetime of login tokens (default 2160h0m0s)
--trusted-proxies string IPs whose X-Forwarded-For is trusted (RAPADURA_TRUSTED_PROXIES) (default "192.168.99.135")
--versions-retained int release directories kept per site (RAPADURA_VERSIONS_RETAINED) (default 20)
--wp-network string multisite domain for the WordPress lane; empty disables it (RAPADURA_WP_NETWORK)
--wp-plugins string comma-separated plugin slugs staff may activate; empty allows any installed plugin (RAPADURA_WP_PLUGIN_ALLOWLIST)
--wp-runner string privileged wp-cli wrapper, run via sudo (RAPADURA_WP_RUNNER)
--zones string comma-separated zones (RAPADURA_ZONES) (default "rapadura.net,phpcomrapadura.org")
Options inherited from parent commands
--gateway string gateway URL (default from credentials or https://agents.rapadura.net)
--json machine-readable JSON output
SEE ALSO
- rapadura - Publish and manage hotsites on rapadura.net and phpcomrapadura.org