[!CAUTION] CSFX is under active development and not recommended for production use or as a secure system. Once ready, announcements will be made in this repository.
CSFX-Core is a distributed infrastructure management platform built with Rust and SvelteKit. It provides centralized control over nodes, workloads, volumes, and networks through a microservice control plane and a lightweight remote agent.
Control Plane Services:
api-gateway— central HTTP API, JWT auth, frontend serving (port 8000)registry— node registration and agent tracking (port 8001)scheduler— workload scheduling via bin-packing (port 8002)volume-manager— persistent volume lifecycle (port 8003)failover-controller— node failure detection and workload rescheduling (port 8004)sdn-controller— overlay network and IPAM management (port 8005)
Agent: csfx-agent runs on each managed node and reports metrics, executes workloads, and manages local state.
CSFX runs on NixOS. The full stack is distributed as a bootable ISO image.
Installation:
- Download the latest ISO from CSFX-Infra Releases
- Boot the target machine from the ISO, confirm the target disk by selecting Yes in the erase dialog, and wait for the reboot
- Read the setup URL, setup code, and CA fingerprint from the node console
- Open
https://<device-ip>:8000/setup, compare the fingerprint with the browser certificate warning, and enter the setup code - Choose the organization name, administrator email and password, and a console PIN, then store the recovery key shown at the end
There are no default credentials. Setup can be completed once; use csfx setup <url> for the same flow from the CLI.
SSH is off by default. An administrator opens it for all nodes in Settings or with csfx ssh enable [--hours <n> | --unlimited] (default 8 hours). Only public keys of administrators are accepted, and the login user is csfx. csfx ssh connect <node> creates a short-lived key and connects.
The node console offers a PIN-protected menu to show service status, reset an administrator password, disable SSH, and reboot. The recovery key shown during setup replaces the PIN if it is lost.
Licensed under the CSFX Internal Use License – Modified Shield License.
See LICENSE for full terms.