--- title: "Server Modes" canonical_url: https://www.superlogical.com/rex/docs/linux/server-modes --- # Server Modes How you run a Rex server decides which account it runs as and who can connect to it. There are three ways to run the Rex server on Linux: | Mode | Who it's for | Runs as | Started by | | --------------- | --------------------------------------- | --------------------------------- | -------------------------------------- | | Personal | Just you | Your account | Any `rex` command, or `rex server start` | | Shared | A few people you trust with one account | `rex` | `rex.service` | | Login | Several people, each as themselves | root, then each person's account | `rex-login-server.service` | If you're the only person using Rex on the machine, run a personal server. If a few people need it and can share one account, use the shared server. If you or others need to access and login as separate accounts, use the login server. The shared server and the login server can't run together. Their services both use `/run/rex`, so starting one stops the other. On Alpine, each refuses to start while the other is running. Personal servers can run alongside either one. With the login server, your personal server is the same server the login server connects you to, so local `rex` commands and remote connections see the same sessions. Every mode listens only on Unix sockets on this machine by default. To connect from another computer, see [Remote Access](https://www.superlogical.com/rex/docs/linux/remote-access.md). ## Personal Server A personal server runs as your own user account and doesn't require any special setup or root access. Any `rex` command automatically starts a personal server if none is running: ```sh rex ls ``` An automatically started personal server stops on its own around 10 seconds after its last session and its last connection close. To start one that remains running you must explicitly start it: ```sh rex server start ``` `rex server start` does nothing if a server is already running, including one that a `rex` command started, so its safe to call multiple times. Its options, such as `--max-sessions`, apply only when it starts a new server. To change them, stop the server and start it again. | Command | Effect | | -------------------------- | -------------------------------------------------------------- | | `rex server status` | Show the running server's status. | | `rex server logs --follow` | Show and follow the log of a server started by `rex server start`. | | `rex server stop` | Stop the server. This ends every session on it. | The socket is in `$XDG_RUNTIME_DIR/rex`, which is usually `/run/user//rex`. Logs and other state are in `~/.local/state/rex`, or `$XDG_STATE_HOME/rex` if you've set it. ## Shared Server A shared server is one server that runs as the `rex` system account. Members of the `rex` group can connect to it, and every program they start runs as `rex`. It's the simplest way to let more than one person use Rex. **Access to the shared server is access to the `rex` account.** Anyone in the group can see and type into every session on it. Only add people you would trust with that account. Add each person to the group, then start the service now and at every boot: ```sh sudo usermod --append --groups rex alice sudo systemctl enable --now rex.service ``` A group change applies the next time that person logs in. The server keeps its data in `/var/lib/rex`. On Alpine, the [OpenRC commands](https://www.superlogical.com/rex/docs/linux/installation.md#alpine) do both steps. A package upgrade restarts the service, which automatically ends every session on it. See [Upgrading](https://www.superlogical.com/rex/docs/linux/upgrading.md). Read [Shared Server](https://www.superlogical.com/rex/docs/linux/shared-server.md) before you set it up for other people. It covers giving them access, configuring the server, and changing the service without losing your changes on upgrade. ## Login Server The login server gives each person a server that runs as their own account, with their own files and permissions. It runs as root. When someone connects, it identifies them, checks `/etc/rex/accounts.jsonc` for the accounts they may use, and hands the connection to a server running as that account. It starts that server if needed. The login server is the most similar to SSH: one root service that lets each person in as their own account. Unlike SSH, it has no passwords or keys. **It identifies people only by how they connect**, such as the local account on the other end of its socket or their Tailscale login. Anyone who can reach it that way can use the accounts listed for them. Each account's server keeps running when the login server stops, restarts, or is upgraded, so sessions survive all three. After an upgrade, each one keeps the old version until its sessions end. The accounts file ships empty, which lets nobody in. Add at least one account, then start the service now and at every boot: ```sh sudo $EDITOR /etc/rex/accounts.jsonc sudo systemctl enable --now rex-login-server.service ``` On Alpine, use the [OpenRC commands](https://www.superlogical.com/rex/docs/linux/installation.md#alpine) instead. After you change the accounts file, reload it. This doesn't drop any connections: ```sh sudo systemctl reload rex-login-server.service ``` On Alpine, run `rc-service rex-login-server reload`. Read [Login Server](https://www.superlogical.com/rex/docs/linux/login-server.md) before you add accounts. It covers the accounts file, how people choose an account when they connect, and the PAM policy the login server checks accounts against. ## Switching Between the Services Starting either service stops the other, but disable the old one too so that it doesn't come back at the next boot: ```sh sudo systemctl disable --now rex.service sudo systemctl enable --now rex-login-server.service ``` On Alpine, starting either service fails while the other is running, so stop the old one first: ```sh rc-service rex stop rc-update del rex rc-update add rex-login-server rc-service rex-login-server start ``` Switching from the shared server ends every session on it. Switching from the login server leaves each account's server running. On machines without systemd-logind, those servers keep their sockets in `/run/rex/accounts`, and `rex.service` refuses to start while that directory exists. Once nobody needs those sessions, clear the directory and start the shared server: ```sh sudo rm -rf /run/rex sudo systemctl start rex.service ``` Alpine has no systemd-logind, so this always applies there. Clear the directory the same way, then run `rc-service rex start`.