Complete reference for the bedrud command-line interface.

Synopsis

# Subcommand style
bedrud <command> [flags]
 
# Flag style
bedrud --livekit --config <path>
bedrud --run --config <path>

Commands

run / server

Start the Bedrud meeting server with API, embedded web frontend, and embedded LiveKit (if configured).

bedrud run    [--config <path>]
bedrud server [--config <path>]

Behavior:

• Loads config from specified path or defaults
• Starts embedded LiveKit if configured for internal mode
• Initializes SQLite/PostgreSQL database and runs migrations
• Creates Fiber HTTP server with all API routes
• Serves embedded React frontend
• Supports ACME (Let’s Encrypt), self-signed TLS, manual TLS, or plain HTTP
• Graceful shutdown on SIGTERM/SIGINT

Implementation: server/internal/server/server.go

--livekit

Start the embedded LiveKit media server only. Extracts binary from Go embed to a temporary directory.

bedrud --livekit --config <path>

Used by: systemd livekit.service created by bedrud install

Implementation: server/internal/livekit/server.go

--run

Alias for bedrud run with same --config flag behavior. Used by systemd bedrud.service.

bedrud --run --config <path>

install

Install Bedrud on a Debian/Linux system. Creates systemd services, config files, directories, and TLS certificates.

bedrud install [flags]

What it does:

1. Stops and removes prior installation if --fresh
2. Prompts for IP, domain, email, TLS mode (if non-interactive and flags not provided)
3. Creates directories: /etc/bedrud, /var/lib/bedrud, /var/lib/bedrud/certs, /var/log/bedrud
4. Copies binary to /usr/local/bin/bedrud
5. Generates Bedrud server config at /etc/bedrud/config.yaml
6. Generates LiveKit media server config at /etc/bedrud/livekit.yaml
7. Generates self-signed certs at /etc/bedrud/cert.pem + /etc/bedrud/key.pem (if TLS enabled and no custom certs)
8. Creates systemd livekit.service (unless using external LiveKit)
9. Creates systemd bedrud.service
10. Runs systemctl daemon-reload, enables, and starts both services
11. Prints access URLs

TLS options:

• --domain + --email → ACME (Let’s Encrypt)
• --self-signed or --tls → self-signed certificate
• --cert + --key → custom certificates
• --no-tls → plain HTTP only

LiveKit topology:

• Default (embedded): LiveKit runs locally, proxied through Bedrud at /livekit
• --livekit-domain: LiveKit runs locally but clients connect directly via its own domain
• --external-livekit: No local LiveKit; connects to remote server

Implementation: server/internal/install/debian.go

Related docs: Installation Guide • Deployment Guide • Backend Deployment Logic

uninstall

Remove Bedrud from the system.

bedrud uninstall

Removes:

• Stops and disables systemd services: bedrud, livekit
• Removes systemd unit files from /etc/systemd/system/
• Removes binary: /usr/local/bin/bedrud, /tmp/bedrud, /tmp/bedrud-livekit-server
• Removes directories: /etc/bedrud, /var/lib/bedrud, /var/log/bedrud

Implementation: server/internal/install/debian.go

Related docs: Installation Guide - Uninstalling

user

Manage users in the Bedrud database.

bedrud user <subcommand> [--config <path>] <flags>

create

Create a new user with local authentication (bcrypt hashed password).

bedrud user create --email <email> --password <password> --name <name>

Required flags:

• --email: User email address
• --password: User password, hashed with bcrypt before storage
• --name: User display name

Access level: user (not superadmin). Use promote to grant admin rights.

delete

Delete a user by email address.

bedrud user delete --email <email>

promote

Grant superadmin access to a user.

bedrud user promote --email <email>

demote

Remove superadmin access from a user (reverts to user level).

bedrud user demote --email <email>

Implementation: server/internal/usercli/usercli.go

help

Show usage message with all commands and flags.

bedrud help

Also triggered when no arguments are provided. Displays the printUsage() output.

Examples

Basic dev server start

# Run with default config.yaml in current directory
bedrud run
 
# Run with custom config
bedrud run --config /path/to/config.yaml
 
# Via env var (fallback)
export CONFIG_PATH=/etc/bedrud/config.yaml
bedrud run

Interactive installation (prompts for inputs)

bedrud install

Non-interactive installation with Let’s Encrypt

bedrud install --domain example.com --email admin@example.com

Self-signed TLS with custom ports

bedrud install --self-signed --port 8443 --lk-port 7880 --lk-tcp-port 7881 --lk-udp-port 7882

Behind CDN with separate LiveKit domain

bedrud install --domain bedrud.example.com --email admin@example.com --livekit-domain lk.example.com --behind-proxy

Fresh reinstall

bedrud install --fresh --domain example.com --email admin@example.com

User management

# Create first admin user
bedrud user create --email admin@example.com --password secret123 --name "Admin User"
 
# Grant superadmin access
bedrud user promote --email admin@example.com
 
# Create regular user
bedrud user create --email user@example.com --password pass456 --name "Regular User"
 
# Remove a user
bedrud user delete --email user@example.com
 
# Remove admin access
bedrud user demote --email admin@example.com

Related Documentation

• Installation Guide - Detailed bedrud install walkthrough, TLS topologies, post-install steps
• Configuration Reference - Server and LiveKit config file structure
• Backend Deployment Logic - How install and uninstall work internally
• Deployment Guide - Full deployment options including systemd services