fix missing vhost dir no error

Author: eldryoth

docs/config-reference.md

@@ -3,12 +3,21 @@
 Fluxheim config is TOML. Unknown fields are rejected, so misspelled settings
 fail during `--check-config` instead of being ignored.
 
-Validate a config before running it:
+Inspect a config before running it:
 
 ```bash
 fluxheim --check-config --config path/to/fluxheim.toml
 ```
 
+For deployment preflight, use `--validate-config`. This performs the same
+static validation and also builds the runtime proxy state, so missing static
+web roots and other startup-blocking filesystem issues fail before systemd
+starts the service:
+
+```bash
+fluxheim --validate-config --config /etc/fluxheim/fluxheim.toml
+```
+
 For split config directories, Fluxheim reads `*.toml` files in sorted order:
 
 ```bash

src/cli.rs

@@ -109,6 +109,7 @@ where
     }
 
     if cli.validate_config {
+        validate_runtime_config(&config)?;
         return Ok(());
     }
 
@@ -119,6 +120,17 @@ where
     crate::runtime::run(config)
 }
 
+#[cfg(feature = "proxy")]
+fn validate_runtime_config(config: &Config) -> Result<(), Box<dyn Error + Send + Sync>> {
+    crate::proxy::FluxProxy::from_config(config)?;
+    Ok(())
+}
+
+#[cfg(not(feature = "proxy"))]
+fn validate_runtime_config(_config: &Config) -> Result<(), Box<dyn Error + Send + Sync>> {
+    Ok(())
+}
+
 fn run_command(
     command: &CliCommand,
     config_path: Option<&std::path::Path>,
@@ -299,6 +311,23 @@ mod tests {
         .unwrap();
     }
 
+    #[test]
+    fn validate_config_rejects_missing_static_root() {
+        let dir = TestDir::new("cli-validate-missing-root");
+        let missing_root = safe_child_path(&dir.path, "missing-site");
+        let config = dir.web_config("fluxheim.toml", "example", "example.test", &missing_root);
+
+        let error = run_from_args([
+            "fluxheim",
+            "--config",
+            config.to_str().unwrap(),
+            "--validate-config",
+        ])
+        .unwrap_err();
+
+        assert!(error.to_string().contains("web root does not exist"));
+    }
+
     #[test]
     fn snapshot_command_creates_store_snapshot() {
         let dir = TestDir::new("cli-snapshot-command");
@@ -417,6 +446,26 @@ mod tests {
             path
         }
 
+        fn web_config(&self, name: &str, vhost_name: &str, host: &str, root: &Path) -> PathBuf {
+            let path = safe_child_path(&self.path, name);
+            fs::write(
+                &path,
+                format!(
+                    r#"
+                    [[vhosts]]
+                    name = "{vhost_name}"
+                    hosts = ["{host}"]
+
+                    [vhosts.web]
+                    root = "{}"
+                    "#,
+                    root.display()
+                ),
+            )
+            .expect("write config");
+            path
+        }
+
         fn minimal_config(&self, name: &str, listen: &str) -> PathBuf {
             let path = safe_child_path(&self.path, name);
             fs::write(

src/web.rs

@@ -50,7 +50,16 @@ impl StaticFileServer {
             ));
         }
 
-        let root_metadata = std::fs::symlink_metadata(root)?;
+        let root_metadata = match std::fs::symlink_metadata(root) {
+            Ok(metadata) => metadata,
+            Err(error) if error.kind() == io::ErrorKind::NotFound => {
+                return Err(io::Error::new(
+                    io::ErrorKind::InvalidInput,
+                    format!("web root does not exist: {}", root.display()),
+                ));
+            }
+            Err(error) => return Err(error),
+        };
         if root_metadata.file_type().is_symlink() || !root_metadata.is_dir() {
             return Err(io::Error::new(
                 io::ErrorKind::InvalidInput,
@@ -1141,6 +1150,23 @@ mod tests {
         let _ = fs::remove_file(root);
     }
 
+    #[test]
+    fn rejects_missing_static_root() {
+        let root = unique_temp_path("web-root-missing");
+
+        let error = StaticFileServer::from_config(&WebConfig {
+            root: Some(root.clone()),
+            index_files: vec!["index.html".to_owned()],
+            deny_dotfiles: true,
+            ..WebConfig::default()
+        })
+        .unwrap_err();
+
+        assert_eq!(error.kind(), io::ErrorKind::InvalidInput);
+        assert!(error.to_string().contains("web root does not exist"));
+        assert!(error.to_string().contains(&root.display().to_string()));
+    }
+
     #[cfg(unix)]
     #[test]
     fn rejects_static_root_below_symlinked_directory() {