The default binary is intentionally self-contained. Heavier TLS (rustls via `axum-server`) is linked for optional **`--tls-cert` / `--tls-key`** HTTPS on the `kowalski` server binary.
```bash
cargo build -p kowalski-cli --release --features postgres # optional DB/federation
```
Copy `target/release/kowalski-cli` (or workspace package name if renamed) plus a `config.toml` and optional TLS PEM files.
- --
- -
Build the Vue app in `../ui` and point **`VITE_API_BASE`** at the public URL of `kowalski` (see `ui/DEPLOY.md`).