Deploy to Production

Take your local formation to production with TLS, authentication, and proper service management.

What You'll Set Up

graph LR
    A[Internet] -->|HTTPS| B[Reverse Proxy]
    B -->|HTTP| C[MUXI Server :7890]
    C --> D[Formation :8001]
    C --> E[Formation :8002]

graph LR
    A[Internet] -->|HTTPS| B[Reverse Proxy]
    B -->|HTTP| C[MUXI Server :7890]
    C --> D[Formation :8001]
    C --> E[Formation :8002]

• TLS termination at the reverse proxy
• HMAC authentication for management
• API key auth for formations
• systemd service for auto-restart

Prerequisites

• Formation working locally (muxi dev succeeds)
• Server with SSH access (cloud VM, dedicated, etc.)
• Domain name (optional but recommended)
• TLS-ready reverse proxy (Nginx/Caddy) or ability to bind HTTPS at the edge
• Open ports: 443 (public), 7890 (internal to proxy), 8001-9000 (internal formations)

1. Install MUXI on Production Server

   SSH to your server:

   ssh user@your-server.com

   Install MUXI:

   curl -fsSL https://muxi.org/install | sudo bash

   Initialize:

   muxi-server init

   Save the generated credentials! You'll need the key_id and secret for CLI access.

2. Configure the Server

   Edit the config file:

   • System install (sudo): /etc/muxi/server/config.yaml
   • User install (Homebrew, curl): ~/.muxi/server/config.yaml

   server:
     port: 7890
     host: 127.0.0.1    # Bind to localhost (reverse proxy handles external)
   
   auth:
     enabled: true
     keys:
       - id: MUXI_production
         secret: sk_...   # From muxi-server init
   
   formations:
     port_range: [8000, 9000]
     auto_restart: true
     health_check_interval: 30s
   
   logging:
     level: info
     format: json
     output: /var/log/muxi/server.log  # System install
     # or: ~/.muxi/server/logs/server.log  # User install

3. Set Up Reverse Proxy

   server {
       listen 443 ssl http2;
       server_name muxi.yourdomain.com;
   
       ssl_certificate /etc/letsencrypt/live/muxi.yourdomain.com/fullchain.pem;
       ssl_certificate_key /etc/letsencrypt/live/muxi.yourdomain.com/privkey.pem;
   
       location / {
           proxy_pass http://127.0.0.1:7890;
           proxy_http_version 1.1;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection "upgrade";
           proxy_set_header Host $host;
           proxy_set_header X-Real-IP $remote_addr;
       }
   }

   Get a certificate:

   sudo certbot --nginx -d muxi.yourdomain.com

   # Caddy handles TLS automatically!
   muxi.yourdomain.com {
       reverse_proxy localhost:7890
   }

4. Create systemd Service

   Create /etc/systemd/system/muxi-server.service:

   [Unit]
   Description=MUXI Server
   After=network.target
   
   [Service]
   Type=simple
   User=muxi
   Group=muxi
   ExecStart=/usr/local/bin/muxi-server serve
   Restart=always
   RestartSec=5
   LimitNOFILE=65535
   
   [Install]
   WantedBy=multi-user.target

   Enable and start:

   sudo useradd -r -s /bin/false muxi
   sudo systemctl daemon-reload
   sudo systemctl enable muxi-server
   sudo systemctl start muxi-server

5. Configure CLI Profile

   On your local machine:

   muxi profiles add production

   Enter when prompted:

   • URL: https://muxi.yourdomain.com
   • Key ID: MUXI_production
   • Secret Key: sk_...

6. Deploy Your Formation

   cd my-formation
   muxi deploy --profile production

   Verify:

   muxi server list --profile production

7. Test

   curl https://muxi.yourdomain.com/api/my-formation/health

   Or chat:

   muxi chat --profile production "Hello!"

Production Checklist

• Authentication enabled (auth.enabled: true)
• TLS/HTTPS configured
• Firewall configured (allow 443, block 7890 from outside)
• systemd service running
• Logs configured
• Monitoring set up (see Monitoring Guide)
• Backup strategy planned

Troubleshooting

sudo journalctl -u muxi-server -n 100

curl http://127.0.0.1:7890/health

Next Steps

Server: Managing Formations - All operations
CLI: muxi deploy - Command reference
Production Guide - Best practices
Monitoring & Logs - Set up observability
CI/CD Integration - Automate deployments