usage: trustmuxd [-h] [--version] [--host HOST] [--port PORT] [--https] [--unix PATH]
                 [--self-signed] [--name NAME] [--advertise SOURCE] [--no-advertise]

Trustmux daemon

options:
  -h, --help          show this help message and exit
  --version           show program's version number and exit
  --host HOST         Bind address (default: Tailscale IP; 127.0.0.1 with --https)
  --port PORT         Port (default: 7432)
  --https             HTTPS mode: Secure cookie + trust proxy headers (use with tailscale serve)
  --unix PATH         Listen on this Unix socket instead of a TCP port (for `tailscale serve
                      unix:PATH`); --port then only names the daemon
  --self-signed       Generate a self-signed TLS cert for direct HTTPS without Tailscale
  --name NAME         Instance whose state and runtime files to use (default: default)
  --advertise SOURCE  Address to publish and to name in the TLS certificate: HOST, HOST:PORT, a
                      URL, or cmd:PROGRAM to run PROGRAM for it (repeatable)
  --no-advertise      Advertise nothing, ignoring any configured source