Skip to main content
  • Run gateway
  • Install service
infisical gateway --token=<token>

​
Description

Run the Infisical gateway in the foreground or manage its systemd service installation. The gateway allows secure communication between your self-hosted Infisical instance and client applications.

​
Subcommands & flags

infisical gateway

Run the Infisical gateway in the foreground. The gateway will connect to the relay service and maintain a persistent connection.
infisical gateway --token=<token> --domain=<domain>

​
Flags

The machine identity access token to authenticate with Infisical.
# Example
infisical gateway --token=<token>
You may also expose the token to the CLI by setting the environment variable INFISICAL_TOKEN before executing the gateway command.
Domain of your self-hosted Infisical instance.
# Example
sudo infisical gateway install --domain=https://app.your-domain.com
Install and enable the gateway as a systemd service. This command must be run with sudo on Linux.
sudo infisical gateway install --token=<token> --domain=<domain>

​
Requirements

  • Must be run on Linux
  • Must be run with root/sudo privileges
  • Requires systemd

​
Flags

The machine identity access token to authenticate with Infisical.
# Example
sudo infisical gateway install --token=<token>
You may also expose the token to the CLI by setting the environment variable INFISICAL_TOKEN before executing the install command.
Domain of your self-hosted Infisical instance.
# Example
sudo infisical gateway install --domain=https://app.your-domain.com

​
Service Details

The systemd service is installed with secure defaults:
  • Service file: /etc/systemd/system/infisical-gateway.service
  • Config file: /etc/infisical/gateway.conf
  • Runs with restricted privileges:
    • InaccessibleDirectories=/home
    • PrivateTmp=yes
    • Resource limits configured for stability
  • Automatically restarts on failure
  • Enabled to start on boot
After installation, manage the service with standard systemd commands:
sudo systemctl start infisical-gateway    # Start the service
sudo systemctl stop infisical-gateway     # Stop the service
sudo systemctl status infisical-gateway   # Check service status
sudo systemctl disable infisical-gateway  # Disable auto-start on boot