FluX — Administrator Guide

This guide is aimed at IT administrators deploying FluX in a regulated or multi-user laboratory environment.

Deployment Modes

• Single-User Desktop — fastest, no auth backend
• Workgroup — shared SQLite on file server, optional Windows auth
• Enterprise — PostgreSQL + LDAP/Entra ID, full audit trail

LDAP / Entra ID

auth:
  provider: ldap
  url: ldaps://corp.example.com:636
  baseDn: OU=Users,DC=corp,DC=example,DC=com
  roleMapping:
    "CN=Lab-Admins,...": admin
    "CN=Lab-Operators,...": operator
    "CN=Lab-Viewers,...": viewer

21 CFR Part 11 / EU Annex 11

FluX ships with a tamper-evident audit trail (hash-chained, Ed25519 signature option). To enable:

1. Set audit.signed = true in flux.config.yaml
2. Provide Ed25519 private key via Windows DPAPI store
3. Activate Lock-Down Mode in admin panel

Backups

Automatic daily dumps of method library + worksheets to a configurable SMB share. Retention default: 90 days.