# config.yaml server: http_port: 8080 https_port: 8443 tls: cert_file: /etc/ryl2/certs/server.crt key_file: /etc/ryl2/certs/server.key

Start-Service -Name Ryl2V2240 # 1. Extract sudo tar -xzf Ryl2_V2240_Server.tar.gz -C /opt/ryl2/v2240

cluster: enabled: true node_id: $HOSTNAME peers: - 10.0.1.11:9000 - 10.0.1.12:9000

logging: level: info file: /var/log/ryl2/server.log rotation: daily

- role: viewer actions: [read] resources: [/api/v1/devices/*]

# Windows Restart-Service -Name Ryl2V2240

# 2. Create a systemd unit (install.sh does this automatically) cd /opt/ryl2/v2240 && sudo ./install.sh

Get-FileHash .\Ryl2_V2240_Server.zip -Algorithm SHA256 :

# 3. Enable & start sudo systemctl enable ryl2v2240 sudo systemctl start ryl2v2240

| Setting | Recommended value (dev) | Production‑grade | |---------|------------------------|-------------------| | logging.level | debug (while testing) | info or warn | | tls.cert_file / key_file | Self‑signed (via openssl req … ) | Certificates from a trusted CA | | cluster.enabled | false (single‑node) | true + proper peer list | | security.rbac.enabled | false (if you only need basic auth) | true + detailed policy file |

security: rbac: enabled: true policy_file: /etc/ryl2/rbac/policy.yaml