Server 安装配置

# 方式一：用 IP 安装（明文 HTTP），访问 http://<服务器IP>:9527
curl -fsSL https://raw.githubusercontent.com/ZingerLittleBee/ServerBee/main/deploy/install.sh | sudo sh -s -- server --method binary -y

# 方式二：用域名安装（自动 Caddy + HTTPS），访问 https://你的域名
curl -fsSL https://raw.githubusercontent.com/ZingerLittleBee/ServerBee/main/deploy/install.sh | sudo sh -s -- server \
  --method binary \
  --domain monitor.example.com --email admin@example.com -y

chmod +x serverbee-server
./serverbee-server

docker run -d \
  --name serverbee-server \
  -p 9527:9527 \
  -v serverbee-data:/data \
  -e MALLOC_ARENA_MAX=2 \
  ghcr.io/zingerlittlebee/serverbee-server:1.0.0-beta.4

# 先构建前端（会嵌入到 Server 二进制中）
cd apps/web && bun install && bun run build && cd ../..

# 构建 Server
cargo build --release -p serverbee-server

[server]
listen = "0.0.0.0:9527"        # 监听地址和端口
data_dir = "./data"            # 数据库及其他数据文件的存储目录
trusted_proxies = []           # 默认为内网/回环 CIDR；设为 [] 表示禁用

[database]
path = "serverbee.db"          # 数据库文件名（相对于 data_dir）
max_connections = 10           # SQLite 连接池最大连接数

[auth]
session_ttl = 86400            # Session 过期时间，单位秒（默认 24 小时）
max_servers = 0                # 新接入服务器的软上限（0 表示不限制）
secure_cookie = true           # 是否给 Session Cookie 设置 Secure 标记（纯 HTTP 本地调试需关闭）

[retention]
records_days = 7               # 分钟级指标保留天数
records_hourly_days = 90       # 小时级聚合指标保留天数
gpu_records_days = 7           # GPU 指标保留天数
ping_records_days = 7          # Ping 探测记录保留天数
audit_logs_days = 180          # 审计日志保留天数
network_probe_days = 7         # 网络探测记录保留天数
network_probe_hourly_days = 90 # 小时级网络探测聚合保留天数
traffic_hourly_days = 7        # 流量小时记录保留天数
traffic_daily_days = 400       # 流量日记录保留天数
task_results_days = 7          # 任务执行结果保留天数
docker_events_days = 7         # Docker 事件记录保留天数
service_monitor_days = 30      # 服务监控记录保留天数

[rate_limit]
login_max = 5                  # 每个时间窗口内最大登录尝试次数
register_max = 10              # 每个窗口内最大 Agent 注册尝试次数（Railway 覆盖为 3）

[scheduler]
timezone = "UTC"               # 每日流量聚合所用时区（如 Asia/Shanghai）

[log]
level = "info"                 # 日志级别：trace / debug / info / warn / error
file = ""                      # 日志文件路径（留空仅输出到 stdout）

[upgrade]
release_base_url = "https://github.com/ZingerLittleBee/ServerBee/releases"  # Agent 升级的基础 URL

[geoip]
mmdb_path = ""                 # MaxMind GeoLite2-City.mmdb 路径（非空即启用 GeoIP）

[oauth]
base_url = ""                  # ServerBee 实例的公网 URL
allow_registration = false     # 是否允许首次 OAuth 登录时自动创建用户

[oauth.github]
client_id = ""
client_secret = ""

[oauth.google]
client_id = ""
client_secret = ""

[oauth.oidc]
issuer_url = ""
client_id = ""
client_secret = ""
scopes = ["openid", "email", "profile"]

# server.listen
export SERVERBEE_SERVER__LISTEN="0.0.0.0:9527"

# retention.records_days
export SERVERBEE_RETENTION__RECORDS_DAYS=14

# oauth.github.client_id
export SERVERBEE_OAUTH__GITHUB__CLIENT_ID="your-github-client-id"

# geoip.mmdb_path（路径非空即启用 GeoIP）
export SERVERBEE_GEOIP__MMDB_PATH="/path/to/GeoLite2-City.mmdb"

========================================
  ServerBee initial admin credentials
  Username: admin
  Password: aB3xK9mP2qR5
========================================

[geoip]
mmdb_path = "/path/to/GeoLite2-City.mmdb"

[oauth]
base_url = "https://serverbee.example.com"
allow_registration = true  # 设为 true 时，首次 OAuth 登录会自动创建账户

[oauth.github]
client_id = "your-client-id"
client_secret = "your-client-secret"

[oauth.google]
client_id = "your-client-id"
client_secret = "your-client-secret"

[oauth.oidc]
issuer_url = "https://auth.example.com/realms/main"
client_id = "serverbee"
client_secret = "your-client-secret"
scopes = ["openid", "email", "profile"]

server {
    listen 443 ssl http2;
    server_name serverbee.example.com;

    ssl_certificate     /etc/ssl/certs/serverbee.pem;
    ssl_certificate_key /etc/ssl/private/serverbee.key;

    location / {
        proxy_pass http://127.0.0.1:9527;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # WebSocket 支持
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400s;
        proxy_send_timeout 86400s;
    }
}

monitor.example.com {
    reverse_proxy 127.0.0.1:9527
}

server_url = "https://monitor.example.com"