.TH BONGO-WEB 1 "July 2026" "Bongo @BONGO_V_STR@" "Bongo commands"
.SH NAME
bongo-web \- Bongo webmail, administration, CalDAV, and CardDAV service
.SH SYNOPSIS
.B bongo-web
.RI [ options ]
.SH DESCRIPTION
.B bongo-web
serves the Bongo web interface and DAV endpoints.  It reads the
.B web
configuration document and normally listens on loopback behind a TLS reverse
proxy.  The Bongo manager or operating-system service should normally start
it; direct invocation is intended for diagnostics.
.SH OPTIONS
.TP
.BI \-\-config= PATH
Read the suffixless JSON web configuration from
.IR PATH .
.TP
.BI \-\-listen-address= ADDRESS
Override the configured listener address.
.TP
.BI \-\-port= PORT
Override the configured listener port.
.TP
.BI \-\-tls-certificate= PATH
Use the PEM certificate at
.IR PATH .
.TP
.BI \-\-tls-key= PATH
Use the matching PEM private key at
.IR PATH .
.TP
.B \-\-verbose
Enable verbose logging.
.TP
.BR \-h , " " \-\-help
Display command help.
.SH SECURITY
Expose the service directly only with HTTPS enabled.  When it runs behind a
proxy, configure both the trusted proxy networks and the forwarded client
address header.  Bongo ignores forwarded identity data from untrusted peers.
.SH FILES
.TP
.B /etc/bongo/config.d/web
Default service configuration for a distribution install.
.TP
.B /usr/share/bongo/web
Static web interface assets.
.SH SEE ALSO
.BR bongo-manager (1),
.BR bongo-setup (1),
.BR bongo-config (1)