ORBITRON

$ git clone https://github.com/chrisvanmeer/orbitron.git
$ cd orbitron
$ docker compose up -d
# uses docker-compose.yml from the repo root
[+] Running 1/1
 ✔ Container orbitron  Started

$ docker compose logs orbitron | grep "ADMIN TOKEN"
orbitron  | [2026-09-23 08:12:04] ADMIN TOKEN: obt_xxxx...
# also available via ghcr.io/chrisvanmeer/orbitron:latest

$ git clone https://github.com/chrisvanmeer/orbitron.git
$ cd orbitron
$ nomad run orbitron.nomad.hcl
$ nomad status orbitron

$ nomad alloc logs <alloc-id> | grep "ADMIN TOKEN"
# host volume: see the "HashiCorp Nomad" README section

$ git clone https://github.com/chrisvanmeer/orbitron.git
$ cd orbitron
$ helm install orbitron ./helm/orbitron

$ kubectl logs orbitron-0 | grep "ADMIN TOKEN"
orbitron-0  | [2026-09-25 09:12:04] ADMIN TOKEN: obt_xxxx...

# behind a reverse proxy:
$ helm install orbitron ./helm/orbitron \
  --set ingress.enabled=true \
  --set ingress.hosts[0].host=mirror.internal

$ ansible-galaxy collection install chrisvanmeer.orbitron
$ ansible-playbook -i hosts orbitron_daemon.yml

# roles:
#   chrisvanmeer.orbitron.orbitron        # install + operate daemon
#   chrisvanmeer.orbitron.orbitron_mirror # declare roles/collections

orbitron.example.com {
    # Caddy sets X-Forwarded-Proto / X-Forwarded-For automatically
    reverse_proxy 127.0.0.1:8080
}

frontend orbitron
    bind :443 ssl crt /etc/haproxy/certs/orbitron.pem
    default_backend orbitron_backend

backend orbitron_backend
    option forwardfor
    option httpchk GET /healthz
    http-request set-header X-Forwarded-Proto https if { ssl_fc }
    timeout server 5m
    server orbitron 127.0.0.1:8080 check inter 10s

server {
    listen 443 ssl;
    http2 on;
    server_name orbitron.example.com;

    ssl_certificate     /etc/letsencrypt/live/orbitron.example.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/orbitron.example.com/privkey.pem;

    proxy_read_timeout 300s;
    proxy_send_timeout 300s;

    location / {
        proxy_pass         http://127.0.0.1:8080;
        proxy_set_header   Host              $host;
        proxy_set_header   X-Forwarded-Proto $scheme;
        proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    }

    location = /healthz {
        proxy_pass http://127.0.0.1:8080/healthz;
    }
}

http:
  routers:
    orbitron:
      rule: "Host(`orbitron.example.com`)"
      service: orbitron
      tls:
        certResolver: letsencrypt
  services:
    orbitron:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:8080
        # Traefik sets X-Forwarded-* automatically
        healthCheck:
          path: /healthz
          interval: 10s