systemd¶

The standalone binary can run as an unprivileged systemd service with delegated CPU and memory controllers for native application limits.

Install the unit¶

Use the reference shinyhub.service as a starting point:

sudo install -m 0755 shinyhub /usr/local/bin/shinyhub
sudo install -m 0644 deploy/systemd/shinyhub.service /etc/systemd/system/shinyhub.service
sudo systemctl daemon-reload
sudo systemctl enable --now shinyhub

Create the service user, configuration, and data directories referenced by the unit before starting it. Store auth.secret outside the repository with owner- only permissions.

Reverse proxy¶

Keep the ShinyHub listener on loopback and terminate HTTPS with Caddy, nginx, or another reverse proxy. Forward both base_url and app_origin hostnames when a dedicated application origin is configured.

Upgrades¶

The reference unit supports listener handoff on SIGHUP. Follow the zero-downtime upgrade guide to replace the binary while existing HTTP and WebSocket connections drain normally.