proxer server

proxer server starts the public HTTP/WebSocket listener and the tunnel control endpoint on one port.

---

Usage

proxer server --listen 0.0.0.0:8080 --domain your-server.example.com --token dev-token

---

Options

• --listen <address> — listen address. Defaults to 0.0.0.0:8080.
• --domain <domain> — public root domain used to extract root and subdomain routes.
• --token <token> — shared token required by tunnel clients. If omitted, only clients without a token match.
• --trusted-proxy <proxy> — trusted reverse proxy preset, IP, or CIDR. Repeat the flag for multiple values.

Trusted proxy presets:

• loopback — loopback addresses
• private — private IPv4 ranges and unique-local IPv6 ranges

---

Environment Variables

• PROXER_LISTEN — default value for --listen
• PROXER_DOMAIN — default value for --domain
• PROXER_TOKEN — default value for --token
• PROXER_TRUSTED_PROXIES — comma-separated trusted proxy values

CLI flags take precedence over environment variables.

---

Internal Endpoints

The server reserves these fixed paths:

/__proxer__/control
/__proxer__/health/live
/__proxer__/health/ready

The control path is not configurable.

---

Notes

Run the server on the public machine or behind a reverse proxy that preserves the original Host header. Unknown hosts return 404.