AZORIUS(8) System Manager's Manual AZORIUS(8)

azorius — azorius administration

The azorius daemon processes messages from other federated servers. This is the admin manual. For user operation, see azorius(1).

Set up a TLS reverse proxy. azorius can listen on TCP or unix sockets, but will not terminate TLS. https is a required component for federation. Also, http signature verification requires accurate time keeping.

Make sure to pass the Host header, if necessary (as for nginx).

proxy_set_header Host $http_host;

Building azorius requires a go compiler 1.18 and libsqlite. On OpenBSD this is the go and sqlite3 packages. Other platforms may require additional development libraries or headers to be installed, such as gcc or cc. Run make. Please be patient. Even on fast machines, building from source can take several seconds.

The following options control where azorius looks for data.

dir
The root data directory, where the database and other user data are stored. This directory contains all user data that persists across upgrades. Requires write access. Defaults to ".".
dir
The root view directory, where html and other templates are stored. The contents of this directory are generally replaced with each release. Read only. Defaults to ".".

The following options control log output. Acceptable values include "stderr" (the default), "stdout", "null", "syslog", or a file name. syslog messages will be sent to the NEWS facility.

log
The error log. Something bad has happened.
log
The informative messages log. Something has happened, but probably not too bad.
log
The debug log. There's probably no reason to care.
log
Set all three logs.

Run the init command. This will create the database and ask four questions, as well as creating the initial user.

Run azorius.

Site CSS may be overridden by creating a views/local.css file in the data directory. Site JS may similarly be included by creating views/local.js. A restart is required after changes.

Stop the old azorius process. Backup the database. Upgrade the database with the upgrade command. Restart.

The current version of the azorius binary may be printed with the version command.

azorius is not currently hardened against SSRF, server side request forgery. Be mindful of what other services may be exposed via localhost or the local network.

Development mode may be enabled or disabled by running devel on|off. In devel mode, secure cookies are disabled, TLS certs are not verified, and templates are reloaded every request.

Advanced configuration values may be set by running the setconfig key value command. For example, to increase the fast timeout value from 5 seconds to 10:

./azorius setconfig fasttimeout 10

azorius files are split between the data directory and the view directory. Both default to "." but may be specified by command line options.

The data directory contains:

azorius.db
The main database.
attachments
Media and attachment storage.
tempstore
Temporary media and attachment storage.

The view directory contains:

views
HTML templates and CSS files.

This series of commands creates a new database, sets a friendly welcome message, and runs azorius.

azorius-v98> make
azorius-v98> ./azorius -datadir ../azorius-data init
listen address: /var/www/azorius.sock
server name: azorius.example.com
username: puffy
password: OxychromaticBlowfishSwatDynamite
azorius-v98> ./azorius -datadir ../azorius-data admin
azorius-v98> date; ./azorius -log azorius.log -datadir ../azorius-data

Upgrade to the next version.

azorius-data> cp azorius.db backup.db
azorius-data> cd ../azorius-v99
azorius-v99> make
azorius-v99> ./azorius -datadir ../azorius-data upgrade
azorius-v99> ./azorius -datadir ../azorius-data cleanup
azorius-v99> date; ./azorius -log azorius.log -datadir ../azorius-data

Image processing and scaling requires considerable memory. It is recommended to adjust the datasize ulimit to at least 1GB.

intro(1), azorius(1)

There's no online upgrade capability. Upgrades may result in minutes of downtime.

January 30, 2024 macOS 14.2