Deployment & Installation

Comprehensive deployment guides and installation options for CheeseWAF across Linux, Docker, Windows, and macOS.

CheeseWAF can be deployed as a system service, containerized workload, or standalone binary across all major platforms. Choose the deployment method that aligns with your infrastructure:

Linux

Choose a shared application root or the standard FHS layout, then configure systemd and a dedicated unprivileged system user.

Docker

Deploy with Docker Compose featuring a read-only root filesystem and unprivileged non-root execution.

Windows

Run via single-file CLI, portable Zip archive, or GUI NSIS installer with a local helper controller.

macOS

Install as a desktop DMG application or run via portable tar.gz command-line archive.

Release Package Matrix & Distribution Strategy

Beginning with stable releases (v0.3.9+), CheeseWAF enforces a server-first distribution model: stable releases prioritize certified Linux server packages accompanied by Sigstore cryptographic signatures and SBOM attestations. Windows and macOS desktop packages are provided as optional operator-side builds.

Pre-compiled production binaries can be downloaded directly from GitHub Releases:

Release PackageTarget Platform & Architecture
cheesewaf-amd64-linux-*.tar.gzLinux x86_64 architecture
cheesewaf-arm64-linux-*.tar.gzLinux ARM64 architecture
cheesewaf-loong64-linux-*.tar.gzLinux LoongArch architecture
cheesewaf-amd64-darwin-*.tar.gz / .dmgmacOS Intel architecture
cheesewaf-arm64-darwin-*.tar.gz / .dmgmacOS Apple Silicon architecture
cheesewaf-amd64-windows-*.exeWindows x86_64 standalone executable
cheesewaf-arm64-windows-*.exeWindows ARM64 standalone executable
cheesewaf-amd64-windows-*.zipWindows x86_64 portable ZIP archive
cheesewaf-arm64-windows-*.zipWindows ARM64 portable ZIP archive
cheesewaf-amd64-windows-*-setup.exeWindows x86_64 NSIS graphical installer
cheesewaf-arm64-windows-*-setup.exeWindows ARM64 NSIS graphical installer

Following installation, proceed to Quick Start to complete system initialization and onboard your first reverse proxy site.

Linux Deployment (systemd)

Install CheeseWAF with the one-line installer or an offline release archive, then configure a public HTTPS management entry and one-time setup token.

Docker Compose Deployment

Deploy CheeseWAF with Docker Compose supporting read-only root filesystems and unprivileged container security.

Windows Deployment

Three Windows deployment modes: Single-file CLI, Portable Zip archive, and NSIS graphical installer, plus native Windows Service integration and a loopback-only local controller.

macOS Deployment

Install CheeseWAF on macOS via graphical DMG package or lightweight tar.gz command-line archive.

Last modified October 11, 2026 · Merge pull request #4 from LaokeQwQ/codex/one-click-install-docs-20261010 (8a1a22b)