# beszel

[Beszel](https://beszel.dev) monitoring hub behind Caddy. Agents push metrics to
the hub; OIDC sign-in is configured in the admin UI after first deploy.

## Required `.env` values

| Variable | Notes |
|----------|-------|
| `BESZEL_DOMAIN` | Public hostname (e.g. `monitoring.example.com`). |
| `ACME_EMAIL` | Let's Encrypt registration email. |
| `USER_CREATION` | `true` lets OIDC auto-create accounts on first login. |

See [`.env.example`](.env.example) for image tags.

## Deploy

```bash
./automations.sh        # Deploy on this host → deploy: beszel
```

Or build + run the self-contained artifact:

```bash
./build.sh
scp deploy.sh root@host:
ssh root@host 'bash deploy.sh'
# non-interactive:
#   BESZEL_DOMAIN=monitoring.example.com ACME_EMAIL=me@example.com SKIP_PROMPTS=1 bash deploy.sh
```

Unattended provisioning: [`cloud-init.yml`](cloud-init.yml).

## Notes

- No Anubis PoW gate here — it would break agent connections.
- For OIDC login, point Beszel at your [pocket-id](../pocket-id/) in the admin UI.
- DNS for `BESZEL_DOMAIN` must resolve to the host and 80/443 be reachable
  before deploy.