Install the binary

Once your server is connected, you'll see an Install Proxima Gateway button. Clicking it opens a stepped progress modal and runs everything over the SSH session you saved earlier.

What the installer does

The dashboard works through a fixed checklist. Each item shows a spinner while running, a green check on success, or a red X on failure.

Step	What happens
Connect to server	Open an SSH session as `root`
Prepare directories	`mkdir -p /etc/proxima-gateway /var/lib/proxima-gateway /var/log/proxima-gateway`
Stop existing service	Idempotent `systemctl stop` so the binary swap is safe
Download binary	Authenticated download of the `latest` release from the gated R2 worker
Verify checksum	`sha256sum -c` against the digest stored in the dashboard
Install binary	`install -m 755` into `/usr/local/bin/proxima-gateway`
Download GeoIP databases	`GeoLite2-City.mmdb`, `GeoLite2-ASN.mmdb`, `GeoLite2-Country.mmdb` (skipped if already present)
Write configuration	`config.json` with your license key, mode 0600
Install systemd unit	`/etc/systemd/system/proxima-gateway.service` + `daemon-reload`
Start service	`systemctl enable --now proxima-gateway`
Verify service	Wait 3 s, then `systemctl is-active`

If any step fails, the modal halts on that line and shows a short error message. Expand Show log output to see the raw shell output for debugging.

How long it takes

A clean install with no GeoIP cache typically lands in 30–60 seconds. Subsequent runs (updates / reinstalls) skip the GeoIP download and finish in 10–20 seconds.

What gets written on your server

/usr/local/bin/proxima-gateway              # binary
/etc/proxima-gateway/config.json            # mode 0600 — contains license key
/etc/proxima-gateway/GeoLite2-City.mmdb     # geo lookups
/etc/proxima-gateway/GeoLite2-ASN.mmdb      # ASN lookups
/etc/proxima-gateway/GeoLite2-Country.mmdb  # country lookups
/etc/systemd/system/proxima-gateway.service # systemd unit
/var/lib/proxima-gateway/                   # state directory
/var/log/proxima-gateway/gateway.log        # stdout + stderr

What's not on your server

❌ Source code — only the compiled Go binary
❌ Tarballs or zip archives — just a single executable
❌ A .env file — license key and dashboard auth secret are baked into config.json (mode 0600, root-only readable)

After install

The modal switches to a green Install complete state. Close it and you'll land on the new server dashboard with a v… version badge and an 80.82.x.x host line.

The proxy starts heartbeating to the dashboard once a minute. Within 60 seconds you'll see Last heartbeat populate on the admin's view of your server.

Next → What to do after install