> ## Documentation Index
> Fetch the complete documentation index at: https://docs.myrax.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuration

> config.toml, the configure command and serve flags

Configuration lives in `/etc/myrax/config.toml`. The installer writes it for
you; change it interactively with `myrax configure` or edit the file and
restart the service.

## config.toml

```toml theme={null}
host = "0.0.0.0"
port = 1487
panel_path = "/"
add_ons = true
auth_user = "admin"
auth_password_hash = "..."   # written by the installer / configure
session_secret = "..."       # generated, do not edit
```

| Key                  | Default     | Meaning                                                                                     |
| -------------------- | ----------- | ------------------------------------------------------------------------------------------- |
| `host`               | `127.0.0.1` | bind address                                                                                |
| `port`               | `1487`      | listen port                                                                                 |
| `panel_path`         | `/`         | URL prefix the panel is served at; with a non-root path, every other path gets a decoy page |
| `add_ons`            | `false`     | plugin system on/off                                                                        |
| `auth_user`          | —           | admin username                                                                              |
| `auth_password_hash` | —           | argon2 hash, never the plain password                                                       |
| `session_secret`     | generated   | signs session cookies                                                                       |

## myrax configure

Interactive reconfiguration — change bind, port, panel path or credentials:

```sh theme={null}
myrax configure
myrax configure --port 8443 --panel-path /panel
myrax configure --username admin --password-stdin < password.txt
```

After changing the port or panel path, the panel tells you the new access URL.

## Serve flags

`myrax serve` is what the service unit runs. Flags override the config file:

```sh theme={null}
myrax serve --host 0.0.0.0 --port 1487 --config /etc/myrax/config.toml
```

## Security notes

* Passwords are stored as argon2 hashes; login is rate-limited per IP.
* Sessions are signed cookies (`myrax_session`), checked on every API call.
* With a non-root `panel_path`, unknown paths return a decoy page instead of
  the login screen.