proxyglassGitHub Get started
Deployment

A small service.
Your choice of runtime.

The native Go binary and systemd service are the recommended deployment. Container and Nomad support are available when they fit your platform.

Install the native binary

Build a host-native binary with make build-native, or cross-build the static Linux binaries with make build-all. Releases are designed for Linux amd64 and arm64.

sudo ./proxyglass --install
sudoedit /etc/proxyglass/config.yml
sudo proxyglass --generate-token --config /etc/proxyglass/config.yml
sudo systemctl enable --now proxyglass

The installer creates the service account, config and data directories, systemd unit and /etc/default/proxyglass. Existing config is preserved on reinstall.

systemd behind nginx

The packaged config listens on 127.0.0.1:8080, so the dashboard is not exposed directly. nginx handles TLS and forwards Host plus X-Forwarded-Proto for OIDC.

Set optional HTTP_PROXY, HTTPS_PROXY and NO_PROXY values in /etc/default/proxyglass, then restart the service.

Container and Nomad

Build the optional image with docker build -f docker/Dockerfile -t proxyglass .. Mount a config file at /etc/proxyglass/config.yml. A sample Nomad job is provided in deploy/proxyglass.nomad.hcl; configure a persistent writable volume for token storage.

Health check

GET /healthz returns 200 OK and ok for load balancer and Nomad health checks. The endpoint does not require dashboard authentication.