# Default: ports 2087, 2083 with auto-generated TLS
./target/release/cpanel2shell-honeypot

# Custom ports
./target/release/cpanel2shell-honeypot -p 2083,2087

# Disable TLS
./target/release/cpanel2shell-honeypot --no-tls

# Per-hostname TLS with hot-reload
./target/release/cpanel2shell-honeypot --certs-config data/certs.toml

# All options
./target/release/cpanel2shell-honeypot --help

default = "auto"

[auto]
cache_dir = "./captures/certs"
key_type = "ecdsa-p256"
validity_days = 365
issuer_cn = "Let's Encrypt Authority X3"

[[host]]
sni = "cpanel.example.com"
cert = "/etc/honeypot/certs/cpanel.pem"
key = "/etc/honeypot/certs/cpanel.key"

src/
├── main.rs          # Entry point, runtime setup
├── cli.rs           # Command-line arguments
├── config.rs        # Application configuration
├── router.rs        # HTTP route definitions
├── capture.rs       # Request logging and payload storage
├── sessions/        # Session persistence
├── handlers/        # HTTP request handlers
├── shell/           # Bash interpreter and VFS
│   ├── lexer.rs     # Tokenizer
│   ├── parser.rs    # Recursive descent parser
│   ├── exec.rs      # AST executor
│   ├── expand.rs    # Variable expansion
│   ├── builtins.rs  # Shell builtins
│   ├── commands.rs  # External command stubs
│   ├── vfs.rs       # Virtual filesystem
│   └── init.rs      # Filesystem seed data
└── tls/             # TLS certificate management
    ├── config.rs    # Certificate configuration
    ├── generator.rs # Certificate generation
    ├── resolver.rs  # SNI certificate resolution
    └── watcher.rs   # Config file hot-reload