CLI reference

chukei up --config <file>            start the proxy
chukei doctor --config <file>        pre-flight: config, TLS, upstream DNS/TCP/TLS,
                                     bind, savings ledger, cache dir
       --probe-login                 also probe the service-account login
chukei validate config --file <f>    schema-validate a config file
chukei replay --query-history <csv>  offline savings projection over QUERY_HISTORY
       --output <json> [--evidence]
chukei savings --config <file>       realized-savings report from the ledger
       --since <24h|7d|...>
       [--evidence <out.json>]       Ed25519-signed evidence bundle
chukei evidence keygen --out <key>   generate a signing key (raw 32-byte seed)
chukei evidence verify --file <f>    verify a signed bundle
chukei plugins list                  list plugins and status
chukei plugins describe <name>       describe one built-in plugin
chukei healthcheck                   probe http://127.0.0.1:9090/healthz
chukei completions <shell>           bash/zsh/fish completions

Exit behaviour

doctor exits non-zero if any probe fails. up drains gracefully on SIGTERM with a 5-second application drain budget and fails open on any plugin error while running. Deployment manifests use a longer process termination window so the drain has room to complete.

Environment overrides

Every config field maps to a CHUKEI_* env var; the most operationally useful are the kill switches:

CHUKEI_PLUGINS_CACHE_ENABLED=false
CHUKEI_PLUGINS_REWRITE_ENABLED=false
CHUKEI_PLUGINS_SUSPEND_ENABLED=false