Installing the Reflex agent

The Reflex agent is a lightweight process that runs on your server, reporting health metrics and executing deployments and repair playbooks.

Supported platforms

OS	Version	Architecture
Ubuntu	22.04, 24.04	x86_64, arm64
Debian	12, 13	x86_64, arm64

Privileges

Log in as a normal user with sudo. Use elevated privileges only for steps that require them (installing packages, writing under /usr, installing a systemd unit). Avoid running an interactive root shell for the whole install session.

Recommended installation (review first)

Download the installer, inspect it, then run it:

# Use the install URL from your Reflex dashboard under Add Server, or:
curl -fsSL https://reflex.expertweb.tools/install/get-reflex.sh -o get-reflex.sh

# Review the script before executing it
less get-reflex.sh

bash get-reflex.sh

The installer:

1. Downloads the latest agent binary for your architecture
2. Registers the server with your Reflex account
3. Opens an encrypted channel to the Reflex control plane

The whole process takes under 60 seconds.

Checksum verification

Pin the agent binary digest in production. Before or while running the installer:

• Set REFLEX_BIN_SHA256 to the expected SHA-256 of reflexd (from your release notes or checksums file), or
• When installing from GitHub Releases, leave REFLEX_BIN_SHA256 unset so the installer can fetch ${TAG}_checksums.txt and verify automatically (disable with REFLEX_AUTO_CHECKSUM=0 if needed).

Example:

export REFLEX_BIN_SHA256='<sha256-of-reflexd>'
bash get-reflex.sh

Shortcut (less safe)

Piping the remote script straight into bash skips review. Prefer the download → inspect → run flow above.

curl -fsSL https://reflex.expertweb.tools/install/get-reflex.sh | bash

Verifying the installation

Once installed, the agent reports back within seconds. Check your Reflex dashboard — your server should appear with a green "Connected" status.

Firewall requirements

The agent initiates outbound connections only — no inbound ports need to be opened.

Direction	Protocol	Destination	Port
Outbound	HTTPS	reflex.expertweb.tools	443

Removing the agent

To remove the Reflex agent from a server, use the removal option in your dashboard under Server Settings → Remove Server. This cleanly uninstalls the agent and disconnects the server from your account.