feat(cli): colorize help page (#9589)

2026-09-24 15:04:27 +08:00 · 2023-09-08 18:21:33 +00:00
parent 11404af9ca
commit e361f1107b
86 changed files with 1224 additions and 920 deletions
@@ -1,58 +1,62 @@
-Usage: coder [global-flags] <subcommand>
+coder v0.0.0-devel

-Coder v0.0.0-devel — A tool for provisioning self-hosted development environments with Terraform.
-  - Start a Coder server:
+[93mUSAGE:[0m
+  coder [global-flags] <subcommand>

-     $ coder server
+  Coder v0.0.0-devel — A tool for provisioning self-hosted development
+  environments with Terraform.
+    - Start a Coder server:
+  
+       $ coder server
+  
+    - Get started by creating a template from an example:
+  
+       $ coder templates init

-  - Get started by creating a template from an example:
-
-     $ coder templates init
-
-[1mSubcommands[0m
+[93mSUBCOMMANDS:[0m
    features           List Enterprise features
    groups             Manage groups
    licenses           Add, delete, and list licenses
    provisionerd       Manage provisioner daemons
    server             Start a Coder server

-[1mGlobal Options[0m 
+[93mGLOBAL OPTIONS:[0m 
 Global options are applied to all commands. They can be set using environment
 variables or flags.

-      --debug-options bool
+      [94m--[0m[94mdebug-options[0m bool
          Print all options, how they're set, then exit.

-      --disable-direct-connections bool, $CODER_DISABLE_DIRECT_CONNECTIONS
+      [94m--[0m[94mdisable-direct-connections[0m bool, [94m$CODER_DISABLE_DIRECT_CONNECTIONS[0m
          Disable direct (P2P) connections to workspaces.

-      --global-config string, $CODER_CONFIG_DIR (default: ~/.config/coderv2)
+      [94m--[0m[94mglobal-config[0m string, [94m$CODER_CONFIG_DIR[0m (default: ~/.config/coderv2)
          Path to the global `coder` config directory.

-      --header string-array, $CODER_HEADER
+      [94m--[0m[94mheader[0m string-array, [94m$CODER_HEADER[0m
          Additional HTTP headers added to all requests. Provide as key=value.
          Can be specified multiple times.

-      --header-command string, $CODER_HEADER_COMMAND
+      [94m--[0m[94mheader-command[0m string, [94m$CODER_HEADER_COMMAND[0m
          An external command that outputs additional HTTP headers added to all
          requests. The command must output each header as `key=value` on its
          own line.

-      --no-feature-warning bool, $CODER_NO_FEATURE_WARNING
+      [94m--[0m[94mno-feature-warning[0m bool, [94m$CODER_NO_FEATURE_WARNING[0m
          Suppress warnings about unlicensed features.

-      --no-version-warning bool, $CODER_NO_VERSION_WARNING
+      [94m--[0m[94mno-version-warning[0m bool, [94m$CODER_NO_VERSION_WARNING[0m
          Suppress warning when client and server versions do not match.

-      --token string, $CODER_SESSION_TOKEN
+      [94m--[0m[94mtoken[0m string, [94m$CODER_SESSION_TOKEN[0m
          Specify an authentication token. For security reasons setting
          CODER_SESSION_TOKEN is preferred.

-      --url url, $CODER_URL
+      [94m--[0m[94murl[0m url, [94m$CODER_URL[0m
          URL to a deployment.

-  -v, --verbose bool, $CODER_VERBOSE
+  [94m-[0m[94mv[0m, [94m--[0m[94mverbose[0m bool, [94m$CODER_VERBOSE[0m
          Enable verbose output.

---
+———
 Report bugs and request features at https://github.com/coder/coder/issues/new
@@ -1,11 +1,14 @@
-Usage: coder features
+coder v0.0.0-devel

-List Enterprise features
+[93mUSAGE:[0m
+  coder features

-Aliases: feature
+  List Enterprise features

-[1mSubcommands[0m
+  Aliases: feature
+
+[93mSUBCOMMANDS:[0m
    list    

---
+———
 Run `coder --help` for a list of global options.
@@ -1,14 +1,17 @@
-Usage: coder features list [flags]
+coder v0.0.0-devel

-Aliases: ls
+[93mUSAGE:[0m
+  coder features list [flags]

-[1mOptions[0m
-  -c, --column string-array (default: Name,Entitlement,Enabled,Limit,Actual)
+  Aliases: ls
+
+[93mOPTIONS:[0m
+  [94m-[0m[94mc[0m, [94m--[0m[94mcolumn[0m string-array (default: Name,Entitlement,Enabled,Limit,Actual)
          Specify a column to filter in the table. Available columns are: Name,
          Entitlement, Enabled, Limit, Actual.

-  -o, --output string (default: table)
+  [94m-[0m[94mo[0m, [94m--[0m[94moutput[0m string (default: table)
          Output format. Available formats are: table, json.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,14 +1,17 @@
-Usage: coder groups
+coder v0.0.0-devel

-Manage groups
+[93mUSAGE:[0m
+  coder groups

-Aliases: group
+  Manage groups

-[1mSubcommands[0m
+  Aliases: group
+
+[93mSUBCOMMANDS:[0m
    create    Create a user group
    delete    Delete a user group
    edit      Edit a user group
    list      List user groups

---
+———
 Run `coder --help` for a list of global options.
@@ -1,13 +1,16 @@
-Usage: coder groups create [flags] <name>
+coder v0.0.0-devel

-Create a user group
+[93mUSAGE:[0m
+  coder groups create [flags] <name>

-[1mOptions[0m
-  -u, --avatar-url string, $CODER_AVATAR_URL
+  Create a user group
+
+[93mOPTIONS:[0m
+  [94m-[0m[94mu[0m, [94m--[0m[94mavatar-url[0m string, [94m$CODER_AVATAR_URL[0m
          Set an avatar for a group.

-      --display-name string, $CODER_DISPLAY_NAME
+      [94m--[0m[94mdisplay-name[0m string, [94m$CODER_DISPLAY_NAME[0m
          Optional human friendly name for the group.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,8 +1,11 @@
-Usage: coder groups delete <name>
+coder v0.0.0-devel

-Delete a user group
+[93mUSAGE:[0m
+  coder groups delete <name>

-Aliases: rm
+  Delete a user group

---
+  Aliases: rm
+
+———
 Run `coder --help` for a list of global options.
@@ -1,22 +1,25 @@
-Usage: coder groups edit [flags] <name>
+coder v0.0.0-devel

-Edit a user group
+[93mUSAGE:[0m
+  coder groups edit [flags] <name>

-[1mOptions[0m
-  -a, --add-users string-array
+  Edit a user group
+
+[93mOPTIONS:[0m
+  [94m-[0m[94ma[0m, [94m--[0m[94madd-users[0m string-array
          Add users to the group. Accepts emails or IDs.

-  -u, --avatar-url string
+  [94m-[0m[94mu[0m, [94m--[0m[94mavatar-url[0m string
          Update the group avatar.

-      --display-name string, $CODER_DISPLAY_NAME
+      [94m--[0m[94mdisplay-name[0m string, [94m$CODER_DISPLAY_NAME[0m
          Optional human friendly name for the group.

-  -n, --name string
+  [94m-[0m[94mn[0m, [94m--[0m[94mname[0m string
          Update the group name.

-  -r, --rm-users string-array
+  [94m-[0m[94mr[0m, [94m--[0m[94mrm-users[0m string-array
          Remove users to the group. Accepts emails or IDs.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,14 +1,17 @@
-Usage: coder groups list [flags]
+coder v0.0.0-devel

-List user groups
+[93mUSAGE:[0m
+  coder groups list [flags]

-[1mOptions[0m
-  -c, --column string-array (default: name,display name,organization id,members,avatar url)
+  List user groups
+
+[93mOPTIONS:[0m
+  [94m-[0m[94mc[0m, [94m--[0m[94mcolumn[0m string-array (default: name,display name,organization id,members,avatar url)
          Columns to display in table output. Available columns: name, display
          name, organization id, members, avatar url.

-  -o, --output string (default: table)
+  [94m-[0m[94mo[0m, [94m--[0m[94moutput[0m string (default: table)
          Output format. Available formats: table, json.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,13 +1,16 @@
-Usage: coder licenses
+coder v0.0.0-devel

-Add, delete, and list licenses
+[93mUSAGE:[0m
+  coder licenses

-Aliases: license
+  Add, delete, and list licenses

-[1mSubcommands[0m
+  Aliases: license
+
+[93mSUBCOMMANDS:[0m
    add       Add license to Coder deployment
    delete    Delete license by ID
    list      List licenses (including expired)

---
+———
 Run `coder --help` for a list of global options.
@@ -1,16 +1,19 @@
-Usage: coder licenses add [flags] [-f file | -l license]
+coder v0.0.0-devel

-Add license to Coder deployment
+[93mUSAGE:[0m
+  coder licenses add [flags] [-f file | -l license]

-[1mOptions[0m
-      --debug bool
+  Add license to Coder deployment
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mdebug[0m bool
          Output license claims for debugging.

-  -f, --file string
+  [94m-[0m[94mf[0m, [94m--[0m[94mfile[0m string
          Load license from file.

-  -l, --license string
+  [94m-[0m[94ml[0m, [94m--[0m[94mlicense[0m string
          License string.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,8 +1,11 @@
-Usage: coder licenses delete <id>
+coder v0.0.0-devel

-Delete license by ID
+[93mUSAGE:[0m
+  coder licenses delete <id>

-Aliases: del, rm
+  Delete license by ID

---
+  Aliases: del, rm
+
+———
 Run `coder --help` for a list of global options.
@@ -1,16 +1,19 @@
-Usage: coder licenses list [flags]
+coder v0.0.0-devel

-List licenses (including expired)
+[93mUSAGE:[0m
+  coder licenses list [flags]

-Aliases: ls
+  List licenses (including expired)

-[1mOptions[0m
-  -c, --column string-array (default: UUID,Expires At,Uploaded At,Features)
+  Aliases: ls
+
+[93mOPTIONS:[0m
+  [94m-[0m[94mc[0m, [94m--[0m[94mcolumn[0m string-array (default: UUID,Expires At,Uploaded At,Features)
          Columns to display in table output. Available columns: id, uuid,
          uploaded at, features, expires at, trial.

-  -o, --output string (default: table)
+  [94m-[0m[94mo[0m, [94m--[0m[94moutput[0m string (default: table)
          Output format. Available formats: table, json.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,9 +1,12 @@
-Usage: coder provisionerd
+coder v0.0.0-devel

-Manage provisioner daemons
+[93mUSAGE:[0m
+  coder provisionerd

-[1mSubcommands[0m
+  Manage provisioner daemons
+
+[93mSUBCOMMANDS:[0m
    start    Run a provisioner daemon

---
+———
 Run `coder --help` for a list of global options.
@@ -1,22 +1,25 @@
-Usage: coder provisionerd start [flags]
+coder v0.0.0-devel

-Run a provisioner daemon
+[93mUSAGE:[0m
+  coder provisionerd start [flags]

-[1mOptions[0m
-  -c, --cache-dir string, $CODER_CACHE_DIRECTORY (default: [cache dir])
+  Run a provisioner daemon
+
+[93mOPTIONS:[0m
+  [94m-[0m[94mc[0m, [94m--[0m[94mcache-dir[0m string, [94m$CODER_CACHE_DIRECTORY[0m (default: [cache dir])
          Directory to store cached data.

-      --poll-interval duration, $CODER_PROVISIONERD_POLL_INTERVAL (default: 1s)
+      [94m--[0m[94mpoll-interval[0m duration, [94m$CODER_PROVISIONERD_POLL_INTERVAL[0m (default: 1s)
          How often to poll for provisioner jobs.

-      --poll-jitter duration, $CODER_PROVISIONERD_POLL_JITTER (default: 100ms)
+      [94m--[0m[94mpoll-jitter[0m duration, [94m$CODER_PROVISIONERD_POLL_JITTER[0m (default: 100ms)
          How much to jitter the poll interval by.

-      --psk string, $CODER_PROVISIONER_DAEMON_PSK
+      [94m--[0m[94mpsk[0m string, [94m$CODER_PROVISIONER_DAEMON_PSK[0m
          Pre-shared key to authenticate with Coder server.

-  -t, --tag string-array, $CODER_PROVISIONERD_TAGS
+  [94m-[0m[94mt[0m, [94m--[0m[94mtag[0m string-array, [94m$CODER_PROVISIONERD_TAGS[0m
          Tags to filter provisioner jobs by.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,8 +1,11 @@
-Usage: coder server [flags]
+coder v0.0.0-devel

-Start a Coder server
+[93mUSAGE:[0m
+  coder server [flags]

-[1mSubcommands[0m
+  Start a Coder server
+
+[93mSUBCOMMANDS:[0m
    create-admin-user         Create a new admin user with the given username,
                              email and password and adds it to every
                              organization.
@@ -11,153 +14,153 @@ Start a Coder server
    postgres-builtin-url      Output the connection URL for the built-in
                              PostgreSQL deployment.

-[1mOptions[0m
-      --cache-dir string, $CODER_CACHE_DIRECTORY (default: [cache dir])
+[93mOPTIONS:[0m
+      [94m--[0m[94mcache-dir[0m string, [94m$CODER_CACHE_DIRECTORY[0m (default: [cache dir])
          The directory to cache temporary files. If unspecified and
          $CACHE_DIRECTORY is set, it will be used for compatibility with
          systemd.

-      --disable-owner-workspace-access bool, $CODER_DISABLE_OWNER_WORKSPACE_ACCESS
+      [94m--[0m[94mdisable-owner-workspace-access[0m bool, [94m$CODER_DISABLE_OWNER_WORKSPACE_ACCESS[0m
          Remove the permission for the 'owner' role to have workspace execution
          on all workspaces. This prevents the 'owner' from ssh, apps, and
          terminal access based on the 'owner' role. They still have their user
          permissions to access their own workspaces.

-      --disable-path-apps bool, $CODER_DISABLE_PATH_APPS
+      [94m--[0m[94mdisable-path-apps[0m bool, [94m$CODER_DISABLE_PATH_APPS[0m
          Disable workspace apps that are not served from subdomains. Path-based
          apps can make requests to the Coder API and pose a security risk when
          the workspace serves malicious JavaScript. This is recommended for
          security purposes if a --wildcard-access-url is configured.

-      --swagger-enable bool, $CODER_SWAGGER_ENABLE
+      [94m--[0m[94mswagger-enable[0m bool, [94m$CODER_SWAGGER_ENABLE[0m
          Expose the swagger endpoint via /swagger.

-      --experiments string-array, $CODER_EXPERIMENTS
+      [94m--[0m[94mexperiments[0m string-array, [94m$CODER_EXPERIMENTS[0m
          Enable one or more experiments. These are not ready for production.
          Separate multiple experiments with commas, or enter '*' to opt-in to
          all available experiments.

-      --postgres-url string, $CODER_PG_CONNECTION_URL
+      [94m--[0m[94mpostgres-url[0m string, [94m$CODER_PG_CONNECTION_URL[0m
          URL of a PostgreSQL database. If empty, PostgreSQL binaries will be
          downloaded from Maven (https://repo1.maven.org/maven2) and store all
          data in the config root. Access the built-in database with "coder
          server postgres-builtin-url".

-      --ssh-keygen-algorithm string, $CODER_SSH_KEYGEN_ALGORITHM (default: ed25519)
+      [94m--[0m[94mssh-keygen-algorithm[0m string, [94m$CODER_SSH_KEYGEN_ALGORITHM[0m (default: ed25519)
          The algorithm to use for generating ssh keys. Accepted values are
          "ed25519", "ecdsa", or "rsa4096".

-      --update-check bool, $CODER_UPDATE_CHECK (default: false)
+      [94m--[0m[94mupdate-check[0m bool, [94m$CODER_UPDATE_CHECK[0m (default: false)
          Periodically check for new releases of Coder and inform the owner. The
          check is performed once per day.

-[1mClient Options[0m 
+[93mCLIENT OPTIONS:[0m 
 These options change the behavior of how clients interact with the Coder.
 Clients include the coder cli, vs code extension, and the web UI.

-      --ssh-config-options string-array, $CODER_SSH_CONFIG_OPTIONS
+      [94m--[0m[94mssh-config-options[0m string-array, [94m$CODER_SSH_CONFIG_OPTIONS[0m
          These SSH config options will override the default SSH config options.
          Provide options in "key=value" or "key value" format separated by
          commas.Using this incorrectly can break SSH to your deployment, use
          cautiously.

-      --ssh-hostname-prefix string, $CODER_SSH_HOSTNAME_PREFIX (default: coder.)
+      [94m--[0m[94mssh-hostname-prefix[0m string, [94m$CODER_SSH_HOSTNAME_PREFIX[0m (default: coder.)
          The SSH deployment prefix is used in the Host of the ssh config.

-[1mConfig Options[0m 
+[93mCONFIG OPTIONS:[0m 
 Use a YAML configuration file when your server launch become unwieldy.

-  -c, --config yaml-config-path, $CODER_CONFIG_PATH
+  [94m-[0m[94mc[0m, [94m--[0m[94mconfig[0m yaml-config-path, [94m$CODER_CONFIG_PATH[0m
          Specify a YAML file to load configuration from.

-      --write-config bool
+      [94m--[0m[94mwrite-config[0m bool
          
          Write out the current server config as YAML to stdout.

-[1mIntrospection / Logging Options[0m 
-      --enable-terraform-debug-mode bool, $CODER_ENABLE_TERRAFORM_DEBUG_MODE (default: false)
+[93mINTROSPECTION / LOGGING OPTIONS:[0m 
+      [94m--[0m[94menable-terraform-debug-mode[0m bool, [94m$CODER_ENABLE_TERRAFORM_DEBUG_MODE[0m (default: false)
          Allow administrators to enable Terraform debug output.

-      --log-human string, $CODER_LOGGING_HUMAN (default: /dev/stderr)
+      [94m--[0m[94mlog-human[0m string, [94m$CODER_LOGGING_HUMAN[0m (default: /dev/stderr)
          Output human-readable logs to a given file.

-      --log-json string, $CODER_LOGGING_JSON
+      [94m--[0m[94mlog-json[0m string, [94m$CODER_LOGGING_JSON[0m
          Output JSON logs to a given file.

-  -l, --log-filter string-array, $CODER_LOG_FILTER
+  [94m-[0m[94ml[0m, [94m--[0m[94mlog-filter[0m string-array, [94m$CODER_LOG_FILTER[0m
          Filter debug logs by matching against a given regex. Use .* to match
          all debug logs.

-      --log-stackdriver string, $CODER_LOGGING_STACKDRIVER
+      [94m--[0m[94mlog-stackdriver[0m string, [94m$CODER_LOGGING_STACKDRIVER[0m
          Output Stackdriver compatible logs to a given file.

-[1mIntrospection / Prometheus Options[0m 
-      --prometheus-address host:port, $CODER_PROMETHEUS_ADDRESS (default: 127.0.0.1:2112)
+[93mINTROSPECTION / PROMETHEUS OPTIONS:[0m 
+      [94m--[0m[94mprometheus-address[0m host:port, [94m$CODER_PROMETHEUS_ADDRESS[0m (default: 127.0.0.1:2112)
          The bind address to serve prometheus metrics.

-      --prometheus-collect-agent-stats bool, $CODER_PROMETHEUS_COLLECT_AGENT_STATS
+      [94m--[0m[94mprometheus-collect-agent-stats[0m bool, [94m$CODER_PROMETHEUS_COLLECT_AGENT_STATS[0m
          Collect agent stats (may increase charges for metrics storage).

-      --prometheus-collect-db-metrics bool, $CODER_PROMETHEUS_COLLECT_DB_METRICS (default: false)
+      [94m--[0m[94mprometheus-collect-db-metrics[0m bool, [94m$CODER_PROMETHEUS_COLLECT_DB_METRICS[0m (default: false)
          Collect database metrics (may increase charges for metrics storage).

-      --prometheus-enable bool, $CODER_PROMETHEUS_ENABLE
+      [94m--[0m[94mprometheus-enable[0m bool, [94m$CODER_PROMETHEUS_ENABLE[0m
          Serve prometheus metrics on the address defined by prometheus address.

-[1mIntrospection / Tracing Options[0m 
-      --trace-logs bool, $CODER_TRACE_LOGS
+[93mINTROSPECTION / TRACING OPTIONS:[0m 
+      [94m--[0m[94mtrace-logs[0m bool, [94m$CODER_TRACE_LOGS[0m
          Enables capturing of logs as events in traces. This is useful for
          debugging, but may result in a very large amount of events being sent
          to the tracing backend which may incur significant costs.

-      --trace bool, $CODER_TRACE_ENABLE
+      [94m--[0m[94mtrace[0m bool, [94m$CODER_TRACE_ENABLE[0m
          Whether application tracing data is collected. It exports to a backend
          configured by environment variables. See:
          https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/protocol/exporter.md.

-      --trace-honeycomb-api-key string, $CODER_TRACE_HONEYCOMB_API_KEY
+      [94m--[0m[94mtrace-honeycomb-api-key[0m string, [94m$CODER_TRACE_HONEYCOMB_API_KEY[0m
          Enables trace exporting to Honeycomb.io using the provided API Key.

-[1mIntrospection / pprof Options[0m 
-      --pprof-address host:port, $CODER_PPROF_ADDRESS (default: 127.0.0.1:6060)
+[93mINTROSPECTION / PPROF OPTIONS:[0m 
+      [94m--[0m[94mpprof-address[0m host:port, [94m$CODER_PPROF_ADDRESS[0m (default: 127.0.0.1:6060)
          The bind address to serve pprof.

-      --pprof-enable bool, $CODER_PPROF_ENABLE
+      [94m--[0m[94mpprof-enable[0m bool, [94m$CODER_PPROF_ENABLE[0m
          Serve pprof metrics on the address defined by pprof address.

-[1mNetworking Options[0m 
-      --access-url url, $CODER_ACCESS_URL
+[93mNETWORKING OPTIONS:[0m 
+      [94m--[0m[94maccess-url[0m url, [94m$CODER_ACCESS_URL[0m
          The URL that users will use to access the Coder deployment.

-      --docs-url url, $CODER_DOCS_URL
+      [94m--[0m[94mdocs-url[0m url, [94m$CODER_DOCS_URL[0m
          Specifies the custom docs URL.

-      --proxy-trusted-headers string-array, $CODER_PROXY_TRUSTED_HEADERS
+      [94m--[0m[94mproxy-trusted-headers[0m string-array, [94m$CODER_PROXY_TRUSTED_HEADERS[0m
          Headers to trust for forwarding IP addresses. e.g. Cf-Connecting-Ip,
          True-Client-Ip, X-Forwarded-For.

-      --proxy-trusted-origins string-array, $CODER_PROXY_TRUSTED_ORIGINS
+      [94m--[0m[94mproxy-trusted-origins[0m string-array, [94m$CODER_PROXY_TRUSTED_ORIGINS[0m
          Origin addresses to respect "proxy-trusted-headers". e.g.
          192.168.1.0/24.

-      --redirect-to-access-url bool, $CODER_REDIRECT_TO_ACCESS_URL
+      [94m--[0m[94mredirect-to-access-url[0m bool, [94m$CODER_REDIRECT_TO_ACCESS_URL[0m
          Specifies whether to redirect requests that do not match the access
          URL host.

-      --secure-auth-cookie bool, $CODER_SECURE_AUTH_COOKIE
+      [94m--[0m[94msecure-auth-cookie[0m bool, [94m$CODER_SECURE_AUTH_COOKIE[0m
          Controls if the 'Secure' property is set on browser session cookies.

-      --wildcard-access-url url, $CODER_WILDCARD_ACCESS_URL
+      [94m--[0m[94mwildcard-access-url[0m url, [94m$CODER_WILDCARD_ACCESS_URL[0m
          Specifies the wildcard hostname to use for workspace applications in
          the form "*.example.com".

-[1mNetworking / DERP Options[0m 
+[93mNETWORKING / DERP OPTIONS:[0m 
 Most Coder deployments never have to think about DERP because all connections
 between workspaces and users are peer-to-peer. However, when Coder cannot
 establish a peer to peer connection, Coder uses a distributed relay network
 backed by Tailscale and WireGuard.

-      --block-direct-connections bool, $CODER_BLOCK_DIRECT
+      [94m--[0m[94mblock-direct-connections[0m bool, [94m$CODER_BLOCK_DIRECT[0m
          Block peer-to-peer (aka. direct) workspace connections. All workspace
          connections from the CLI will be proxied through Coder (or custom
          configured DERP servers) and will never be peer-to-peer when enabled.
@@ -165,36 +168,36 @@ backed by Tailscale and WireGuard.
          until they are restarted after this change has been made, but new
          connections will still be proxied regardless.

-      --derp-config-path string, $CODER_DERP_CONFIG_PATH
+      [94m--[0m[94mderp-config-path[0m string, [94m$CODER_DERP_CONFIG_PATH[0m
          Path to read a DERP mapping from. See:
          https://tailscale.com/kb/1118/custom-derp-servers/.

-      --derp-config-url string, $CODER_DERP_CONFIG_URL
+      [94m--[0m[94mderp-config-url[0m string, [94m$CODER_DERP_CONFIG_URL[0m
          URL to fetch a DERP mapping on startup. See:
          https://tailscale.com/kb/1118/custom-derp-servers/.

-      --derp-force-websockets bool, $CODER_DERP_FORCE_WEBSOCKETS
+      [94m--[0m[94mderp-force-websockets[0m bool, [94m$CODER_DERP_FORCE_WEBSOCKETS[0m
          Force clients and agents to always use WebSocket to connect to DERP
          relay servers. By default, DERP uses `Upgrade: derp`, which may cause
          issues with some reverse proxies. Clients may automatically fallback
          to WebSocket if they detect an issue with `Upgrade: derp`, but this
          does not work in all situations.

-      --derp-server-enable bool, $CODER_DERP_SERVER_ENABLE (default: true)
+      [94m--[0m[94mderp-server-enable[0m bool, [94m$CODER_DERP_SERVER_ENABLE[0m (default: true)
          Whether to enable or disable the embedded DERP relay server.

-      --derp-server-region-name string, $CODER_DERP_SERVER_REGION_NAME (default: Coder Embedded Relay)
+      [94m--[0m[94mderp-server-region-name[0m string, [94m$CODER_DERP_SERVER_REGION_NAME[0m (default: Coder Embedded Relay)
          Region name that for the embedded DERP server.

-      --derp-server-stun-addresses string-array, $CODER_DERP_SERVER_STUN_ADDRESSES (default: stun.l.google.com:19302,stun1.l.google.com:19302,stun2.l.google.com:19302,stun3.l.google.com:19302,stun4.l.google.com:19302)
+      [94m--[0m[94mderp-server-stun-addresses[0m string-array, [94m$CODER_DERP_SERVER_STUN_ADDRESSES[0m (default: stun.l.google.com:19302,stun1.l.google.com:19302,stun2.l.google.com:19302,stun3.l.google.com:19302,stun4.l.google.com:19302)
          Addresses for STUN servers to establish P2P connections. It's
          recommended to have at least two STUN servers to give users the best
          chance of connecting P2P to workspaces. Each STUN server will get it's
          own DERP region, with region IDs starting at `--derp-server-region-id
          + 1`. Use special value 'disable' to turn off STUN completely.

-[1mNetworking / HTTP Options[0m 
-      --disable-password-auth bool, $CODER_DISABLE_PASSWORD_AUTH
+[93mNETWORKING / HTTP OPTIONS:[0m 
+      [94m--[0m[94mdisable-password-auth[0m bool, [94m$CODER_DISABLE_PASSWORD_AUTH[0m
          Disable password authentication. This is recommended for security
          purposes in production deployments that rely on an identity provider.
          Any user with the owner role will be able to sign in with their
@@ -203,226 +206,226 @@ backed by Tailscale and WireGuard.
          create-admin` command to create a new admin user directly in the
          database.

-      --disable-session-expiry-refresh bool, $CODER_DISABLE_SESSION_EXPIRY_REFRESH
+      [94m--[0m[94mdisable-session-expiry-refresh[0m bool, [94m$CODER_DISABLE_SESSION_EXPIRY_REFRESH[0m
          Disable automatic session expiry bumping due to activity. This forces
          all sessions to become invalid after the session expiry duration has
          been reached.

-      --http-address string, $CODER_HTTP_ADDRESS (default: 127.0.0.1:3000)
+      [94m--[0m[94mhttp-address[0m string, [94m$CODER_HTTP_ADDRESS[0m (default: 127.0.0.1:3000)
          HTTP bind address of the server. Unset to disable the HTTP endpoint.

-      --max-token-lifetime duration, $CODER_MAX_TOKEN_LIFETIME (default: 876600h0m0s)
+      [94m--[0m[94mmax-token-lifetime[0m duration, [94m$CODER_MAX_TOKEN_LIFETIME[0m (default: 876600h0m0s)
          The maximum lifetime duration users can specify when creating an API
          token.

-      --proxy-health-interval duration, $CODER_PROXY_HEALTH_INTERVAL (default: 1m0s)
+      [94m--[0m[94mproxy-health-interval[0m duration, [94m$CODER_PROXY_HEALTH_INTERVAL[0m (default: 1m0s)
          The interval in which coderd should be checking the status of
          workspace proxies.

-      --session-duration duration, $CODER_SESSION_DURATION (default: 24h0m0s)
+      [94m--[0m[94msession-duration[0m duration, [94m$CODER_SESSION_DURATION[0m (default: 24h0m0s)
          The token expiry duration for browser sessions. Sessions may last
          longer if they are actively making requests, but this functionality
          can be disabled via --disable-session-expiry-refresh.

-[1mNetworking / TLS Options[0m 
+[93mNETWORKING / TLS OPTIONS:[0m 
 Configure TLS / HTTPS for your Coder deployment. If you're running Coder behind
 a TLS-terminating reverse proxy or are accessing Coder over a secure link, you
 can safely ignore these settings.

-      --strict-transport-security int, $CODER_STRICT_TRANSPORT_SECURITY (default: 0)
+      [94m--[0m[94mstrict-transport-security[0m int, [94m$CODER_STRICT_TRANSPORT_SECURITY[0m (default: 0)
          Controls if the 'Strict-Transport-Security' header is set on all
          static file responses. This header should only be set if the server is
          accessed via HTTPS. This value is the MaxAge in seconds of the header.

-      --strict-transport-security-options string-array, $CODER_STRICT_TRANSPORT_SECURITY_OPTIONS
+      [94m--[0m[94mstrict-transport-security-options[0m string-array, [94m$CODER_STRICT_TRANSPORT_SECURITY_OPTIONS[0m
          Two optional fields can be set in the Strict-Transport-Security
          header; 'includeSubDomains' and 'preload'. The
          'strict-transport-security' flag must be set to a non-zero value for
          these options to be used.

-      --tls-address host:port, $CODER_TLS_ADDRESS (default: 127.0.0.1:3443)
+      [94m--[0m[94mtls-address[0m host:port, [94m$CODER_TLS_ADDRESS[0m (default: 127.0.0.1:3443)
          HTTPS bind address of the server.

-      --tls-cert-file string-array, $CODER_TLS_CERT_FILE
+      [94m--[0m[94mtls-cert-file[0m string-array, [94m$CODER_TLS_CERT_FILE[0m
          Path to each certificate for TLS. It requires a PEM-encoded file. To
          configure the listener to use a CA certificate, concatenate the
          primary certificate and the CA certificate together. The primary
          certificate should appear first in the combined file.

-      --tls-client-auth string, $CODER_TLS_CLIENT_AUTH (default: none)
+      [94m--[0m[94mtls-client-auth[0m string, [94m$CODER_TLS_CLIENT_AUTH[0m (default: none)
          Policy the server will follow for TLS Client Authentication. Accepted
          values are "none", "request", "require-any", "verify-if-given", or
          "require-and-verify".

-      --tls-client-ca-file string, $CODER_TLS_CLIENT_CA_FILE
+      [94m--[0m[94mtls-client-ca-file[0m string, [94m$CODER_TLS_CLIENT_CA_FILE[0m
          PEM-encoded Certificate Authority file used for checking the
          authenticity of client.

-      --tls-client-cert-file string, $CODER_TLS_CLIENT_CERT_FILE
+      [94m--[0m[94mtls-client-cert-file[0m string, [94m$CODER_TLS_CLIENT_CERT_FILE[0m
          Path to certificate for client TLS authentication. It requires a
          PEM-encoded file.

-      --tls-client-key-file string, $CODER_TLS_CLIENT_KEY_FILE
+      [94m--[0m[94mtls-client-key-file[0m string, [94m$CODER_TLS_CLIENT_KEY_FILE[0m
          Path to key for client TLS authentication. It requires a PEM-encoded
          file.

-      --tls-enable bool, $CODER_TLS_ENABLE
+      [94m--[0m[94mtls-enable[0m bool, [94m$CODER_TLS_ENABLE[0m
          Whether TLS will be enabled.

-      --tls-key-file string-array, $CODER_TLS_KEY_FILE
+      [94m--[0m[94mtls-key-file[0m string-array, [94m$CODER_TLS_KEY_FILE[0m
          Paths to the private keys for each of the certificates. It requires a
          PEM-encoded file.

-      --tls-min-version string, $CODER_TLS_MIN_VERSION (default: tls12)
+      [94m--[0m[94mtls-min-version[0m string, [94m$CODER_TLS_MIN_VERSION[0m (default: tls12)
          Minimum supported version of TLS. Accepted values are "tls10",
          "tls11", "tls12" or "tls13".

-[1mOAuth2 / GitHub Options[0m 
-      --oauth2-github-allow-everyone bool, $CODER_OAUTH2_GITHUB_ALLOW_EVERYONE
+[93mOAUTH2 / GITHUB OPTIONS:[0m 
+      [94m--[0m[94moauth2-github-allow-everyone[0m bool, [94m$CODER_OAUTH2_GITHUB_ALLOW_EVERYONE[0m
          Allow all logins, setting this option means allowed orgs and teams
          must be empty.

-      --oauth2-github-allow-signups bool, $CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS
+      [94m--[0m[94moauth2-github-allow-signups[0m bool, [94m$CODER_OAUTH2_GITHUB_ALLOW_SIGNUPS[0m
          Whether new users can sign up with GitHub.

-      --oauth2-github-allowed-orgs string-array, $CODER_OAUTH2_GITHUB_ALLOWED_ORGS
+      [94m--[0m[94moauth2-github-allowed-orgs[0m string-array, [94m$CODER_OAUTH2_GITHUB_ALLOWED_ORGS[0m
          Organizations the user must be a member of to Login with GitHub.

-      --oauth2-github-allowed-teams string-array, $CODER_OAUTH2_GITHUB_ALLOWED_TEAMS
+      [94m--[0m[94moauth2-github-allowed-teams[0m string-array, [94m$CODER_OAUTH2_GITHUB_ALLOWED_TEAMS[0m
          Teams inside organizations the user must be a member of to Login with
          GitHub. Structured as: <organization-name>/<team-slug>.

-      --oauth2-github-client-id string, $CODER_OAUTH2_GITHUB_CLIENT_ID
+      [94m--[0m[94moauth2-github-client-id[0m string, [94m$CODER_OAUTH2_GITHUB_CLIENT_ID[0m
          Client ID for Login with GitHub.

-      --oauth2-github-client-secret string, $CODER_OAUTH2_GITHUB_CLIENT_SECRET
+      [94m--[0m[94moauth2-github-client-secret[0m string, [94m$CODER_OAUTH2_GITHUB_CLIENT_SECRET[0m
          Client secret for Login with GitHub.

-      --oauth2-github-enterprise-base-url string, $CODER_OAUTH2_GITHUB_ENTERPRISE_BASE_URL
+      [94m--[0m[94moauth2-github-enterprise-base-url[0m string, [94m$CODER_OAUTH2_GITHUB_ENTERPRISE_BASE_URL[0m
          Base URL of a GitHub Enterprise deployment to use for Login with
          GitHub.

-[1mOIDC Options[0m 
-      --oidc-group-auto-create bool, $CODER_OIDC_GROUP_AUTO_CREATE (default: false)
+[93mOIDC OPTIONS:[0m 
+      [94m--[0m[94moidc-group-auto-create[0m bool, [94m$CODER_OIDC_GROUP_AUTO_CREATE[0m (default: false)
          Automatically creates missing groups from a user's groups claim.

-      --oidc-allow-signups bool, $CODER_OIDC_ALLOW_SIGNUPS (default: true)
+      [94m--[0m[94moidc-allow-signups[0m bool, [94m$CODER_OIDC_ALLOW_SIGNUPS[0m (default: true)
          Whether new users can sign up with OIDC.

-      --oidc-auth-url-params struct[map[string]string], $CODER_OIDC_AUTH_URL_PARAMS (default: {"access_type": "offline"})
+      [94m--[0m[94moidc-auth-url-params[0m struct[map[string]string], [94m$CODER_OIDC_AUTH_URL_PARAMS[0m (default: {"access_type": "offline"})
          OIDC auth URL parameters to pass to the upstream provider.

-      --oidc-client-cert-file string, $CODER_OIDC_CLIENT_CERT_FILE
+      [94m--[0m[94moidc-client-cert-file[0m string, [94m$CODER_OIDC_CLIENT_CERT_FILE[0m
          Pem encoded certificate file to use for oauth2 PKI/JWT authorization.
          The public certificate that accompanies oidc-client-key-file. A
          standard x509 certificate is expected.

-      --oidc-client-id string, $CODER_OIDC_CLIENT_ID
+      [94m--[0m[94moidc-client-id[0m string, [94m$CODER_OIDC_CLIENT_ID[0m
          Client ID to use for Login with OIDC.

-      --oidc-client-key-file string, $CODER_OIDC_CLIENT_KEY_FILE
+      [94m--[0m[94moidc-client-key-file[0m string, [94m$CODER_OIDC_CLIENT_KEY_FILE[0m
          Pem encoded RSA private key to use for oauth2 PKI/JWT authorization.
          This can be used instead of oidc-client-secret if your IDP supports
          it.

-      --oidc-client-secret string, $CODER_OIDC_CLIENT_SECRET
+      [94m--[0m[94moidc-client-secret[0m string, [94m$CODER_OIDC_CLIENT_SECRET[0m
          Client secret to use for Login with OIDC.

-      --oidc-email-domain string-array, $CODER_OIDC_EMAIL_DOMAIN
+      [94m--[0m[94moidc-email-domain[0m string-array, [94m$CODER_OIDC_EMAIL_DOMAIN[0m
          Email domains that clients logging in with OIDC must match.

-      --oidc-email-field string, $CODER_OIDC_EMAIL_FIELD (default: email)
+      [94m--[0m[94moidc-email-field[0m string, [94m$CODER_OIDC_EMAIL_FIELD[0m (default: email)
          OIDC claim field to use as the email.

-      --oidc-group-field string, $CODER_OIDC_GROUP_FIELD
+      [94m--[0m[94moidc-group-field[0m string, [94m$CODER_OIDC_GROUP_FIELD[0m
          This field must be set if using the group sync feature and the scope
          name is not 'groups'. Set to the claim to be used for groups.

-      --oidc-group-mapping struct[map[string]string], $CODER_OIDC_GROUP_MAPPING (default: {})
+      [94m--[0m[94moidc-group-mapping[0m struct[map[string]string], [94m$CODER_OIDC_GROUP_MAPPING[0m (default: {})
          A map of OIDC group IDs and the group in Coder it should map to. This
          is useful for when OIDC providers only return group IDs.

-      --oidc-ignore-email-verified bool, $CODER_OIDC_IGNORE_EMAIL_VERIFIED
+      [94m--[0m[94moidc-ignore-email-verified[0m bool, [94m$CODER_OIDC_IGNORE_EMAIL_VERIFIED[0m
          Ignore the email_verified claim from the upstream provider.

-      --oidc-ignore-userinfo bool, $CODER_OIDC_IGNORE_USERINFO (default: false)
+      [94m--[0m[94moidc-ignore-userinfo[0m bool, [94m$CODER_OIDC_IGNORE_USERINFO[0m (default: false)
          Ignore the userinfo endpoint and only use the ID token for user
          information.

-      --oidc-issuer-url string, $CODER_OIDC_ISSUER_URL
+      [94m--[0m[94moidc-issuer-url[0m string, [94m$CODER_OIDC_ISSUER_URL[0m
          Issuer URL to use for Login with OIDC.

-      --oidc-group-regex-filter regexp, $CODER_OIDC_GROUP_REGEX_FILTER (default: .*)
+      [94m--[0m[94moidc-group-regex-filter[0m regexp, [94m$CODER_OIDC_GROUP_REGEX_FILTER[0m (default: .*)
          If provided any group name not matching the regex is ignored. This
          allows for filtering out groups that are not needed. This filter is
          applied after the group mapping.

-      --oidc-scopes string-array, $CODER_OIDC_SCOPES (default: openid,profile,email)
+      [94m--[0m[94moidc-scopes[0m string-array, [94m$CODER_OIDC_SCOPES[0m (default: openid,profile,email)
          Scopes to grant when authenticating with OIDC.

-      --oidc-user-role-default string-array, $CODER_OIDC_USER_ROLE_DEFAULT
+      [94m--[0m[94moidc-user-role-default[0m string-array, [94m$CODER_OIDC_USER_ROLE_DEFAULT[0m
          If user role sync is enabled, these roles are always included for all
          authenticated users. The 'member' role is always assigned.

-      --oidc-user-role-field string, $CODER_OIDC_USER_ROLE_FIELD
+      [94m--[0m[94moidc-user-role-field[0m string, [94m$CODER_OIDC_USER_ROLE_FIELD[0m
          This field must be set if using the user roles sync feature. Set this
          to the name of the claim used to store the user's role. The roles
          should be sent as an array of strings.

-      --oidc-user-role-mapping struct[map[string][]string], $CODER_OIDC_USER_ROLE_MAPPING (default: {})
+      [94m--[0m[94moidc-user-role-mapping[0m struct[map[string][]string], [94m$CODER_OIDC_USER_ROLE_MAPPING[0m (default: {})
          A map of the OIDC passed in user roles and the groups in Coder it
          should map to. This is useful if the group names do not match. If
          mapped to the empty string, the role will ignored.

-      --oidc-username-field string, $CODER_OIDC_USERNAME_FIELD (default: preferred_username)
+      [94m--[0m[94moidc-username-field[0m string, [94m$CODER_OIDC_USERNAME_FIELD[0m (default: preferred_username)
          OIDC claim field to use as the username.

-      --oidc-sign-in-text string, $CODER_OIDC_SIGN_IN_TEXT (default: OpenID Connect)
+      [94m--[0m[94moidc-sign-in-text[0m string, [94m$CODER_OIDC_SIGN_IN_TEXT[0m (default: OpenID Connect)
          The text to show on the OpenID Connect sign in button.

-      --oidc-icon-url url, $CODER_OIDC_ICON_URL
+      [94m--[0m[94moidc-icon-url[0m url, [94m$CODER_OIDC_ICON_URL[0m
          URL pointing to the icon to use on the OpenID Connect login button.

-[1mProvisioning Options[0m 
+[93mPROVISIONING OPTIONS:[0m 
 Tune the behavior of the provisioner, which is responsible for creating,
 updating, and deleting workspace resources.

-      --provisioner-force-cancel-interval duration, $CODER_PROVISIONER_FORCE_CANCEL_INTERVAL (default: 10m0s)
+      [94m--[0m[94mprovisioner-force-cancel-interval[0m duration, [94m$CODER_PROVISIONER_FORCE_CANCEL_INTERVAL[0m (default: 10m0s)
          Time to force cancel provisioning tasks that are stuck.

-      --provisioner-daemon-poll-interval duration, $CODER_PROVISIONER_DAEMON_POLL_INTERVAL (default: 1s)
+      [94m--[0m[94mprovisioner-daemon-poll-interval[0m duration, [94m$CODER_PROVISIONER_DAEMON_POLL_INTERVAL[0m (default: 1s)
          Time to wait before polling for a new job.

-      --provisioner-daemon-poll-jitter duration, $CODER_PROVISIONER_DAEMON_POLL_JITTER (default: 100ms)
+      [94m--[0m[94mprovisioner-daemon-poll-jitter[0m duration, [94m$CODER_PROVISIONER_DAEMON_POLL_JITTER[0m (default: 100ms)
          Random jitter added to the poll interval.

-      --provisioner-daemon-psk string, $CODER_PROVISIONER_DAEMON_PSK
+      [94m--[0m[94mprovisioner-daemon-psk[0m string, [94m$CODER_PROVISIONER_DAEMON_PSK[0m
          Pre-shared key to authenticate external provisioner daemons to Coder
          server.

-      --provisioner-daemons int, $CODER_PROVISIONER_DAEMONS (default: 3)
+      [94m--[0m[94mprovisioner-daemons[0m int, [94m$CODER_PROVISIONER_DAEMONS[0m (default: 3)
          Number of provisioner daemons to create on start. If builds are stuck
          in queued state for a long time, consider increasing this.

-[1mTelemetry Options[0m 
+[93mTELEMETRY OPTIONS:[0m 
 Telemetry is critical to our ability to improve Coder. We strip all
 personalinformation before sending data to our servers. Please only disable
 telemetrywhen required by your organization's security policy.

-      --telemetry bool, $CODER_TELEMETRY_ENABLE (default: false)
+      [94m--[0m[94mtelemetry[0m bool, [94m$CODER_TELEMETRY_ENABLE[0m (default: false)
          Whether telemetry is enabled or not. Coder collects anonymized usage
          data to help improve our product.

-      --telemetry-trace bool, $CODER_TELEMETRY_TRACE (default: false)
+      [94m--[0m[94mtelemetry-trace[0m bool, [94m$CODER_TELEMETRY_TRACE[0m (default: false)
          Whether Opentelemetry traces are sent to Coder. Coder collects
          anonymized application tracing to help improve our product. Disabling
          telemetry also disables this option.

-[1mUser Quiet Hours Schedule Options[0m 
+[93mUSER QUIET HOURS SCHEDULE OPTIONS:[0m 
 Allow users to set quiet hours schedules each day for workspaces to avoid
 workspaces stopping during the day due to template max TTL.

-      --default-quiet-hours-schedule string, $CODER_QUIET_HOURS_DEFAULT_SCHEDULE
+      [94m--[0m[94mdefault-quiet-hours-schedule[0m string, [94m$CODER_QUIET_HOURS_DEFAULT_SCHEDULE[0m
          The default daily cron schedule applied to users that haven't set a
          custom quiet hours schedule themselves. The quiet hours schedule
          determines when workspaces will be force stopped due to the template's
@@ -432,8 +435,8 @@ workspaces stopping during the day due to template max TTL.
          one hour and minute can be specified (ranges or comma separated values
          are not supported).

-[1m⚠️ Dangerous Options[0m 
-      --dangerous-allow-path-app-sharing bool, $CODER_DANGEROUS_ALLOW_PATH_APP_SHARING
+[93m⚠️ DANGEROUS OPTIONS:[0m 
+      [94m--[0m[94mdangerous-allow-path-app-sharing[0m bool, [94m$CODER_DANGEROUS_ALLOW_PATH_APP_SHARING[0m
          Allow workspace apps that are not served from subdomains to be shared.
          Path-based app sharing is DISABLED by default for security purposes.
          Path-based apps can make requests to the Coder API and pose a security
@@ -441,7 +444,7 @@ workspaces stopping during the day due to template max TTL.
          can be disabled entirely with --disable-path-apps for further
          security.

-      --dangerous-allow-path-app-site-owner-access bool, $CODER_DANGEROUS_ALLOW_PATH_APP_SITE_OWNER_ACCESS
+      [94m--[0m[94mdangerous-allow-path-app-site-owner-access[0m bool, [94m$CODER_DANGEROUS_ALLOW_PATH_APP_SITE_OWNER_ACCESS[0m
          Allow site-owners to access workspace apps from workspaces they do not
          own. Owners cannot access path-based apps they do not own by default.
          Path-based apps can make requests to the Coder API and pose a security
@@ -449,17 +452,17 @@ workspaces stopping during the day due to template max TTL.
          can be disabled entirely with --disable-path-apps for further
          security.

-[1mEnterprise Options[0m 
+[93mENTERPRISE OPTIONS:[0m 
 These options are only available in the Enterprise Edition.

-      --browser-only bool, $CODER_BROWSER_ONLY
+      [94m--[0m[94mbrowser-only[0m bool, [94m$CODER_BROWSER_ONLY[0m
          Whether Coder only allows connections to workspaces via the browser.

-      --derp-server-relay-url url, $CODER_DERP_SERVER_RELAY_URL
+      [94m--[0m[94mderp-server-relay-url[0m url, [94m$CODER_DERP_SERVER_RELAY_URL[0m
          An HTTP URL that is accessible by other replicas to relay DERP
          traffic. Required for high availability.

-      --external-token-encryption-keys string-array, $CODER_EXTERNAL_TOKEN_ENCRYPTION_KEYS
+      [94m--[0m[94mexternal-token-encryption-keys[0m string-array, [94m$CODER_EXTERNAL_TOKEN_ENCRYPTION_KEYS[0m
          Encrypt OIDC and Git authentication tokens with AES-256-GCM in the
          database. The value must be a comma-separated list of base64-encoded
          keys. Each key, when base64-decoded, must be exactly 32 bytes in
@@ -469,9 +472,9 @@ These options are only available in the Enterprise Edition.
          process of rotating keys with the `coder server dbcrypt rotate`
          command.

-      --scim-auth-header string, $CODER_SCIM_AUTH_HEADER
+      [94m--[0m[94mscim-auth-header[0m string, [94m$CODER_SCIM_AUTH_HEADER[0m
          Enables SCIM and sets the authentication header for the built-in SCIM
          server. New users are automatically created with OIDC authentication.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,32 +1,35 @@
-Usage: coder server create-admin-user [flags]
+coder v0.0.0-devel

-Create a new admin user with the given username, email and password and adds it
-to every organization.
+[93mUSAGE:[0m
+  coder server create-admin-user [flags]

-[1mOptions[0m
-      --email string, $CODER_EMAIL
+  Create a new admin user with the given username, email and password and adds
+  it to every organization.
+
+[93mOPTIONS:[0m
+      [94m--[0m[94memail[0m string, [94m$CODER_EMAIL[0m
          The email of the new user. If not specified, you will be prompted via
          stdin.

-      --password string, $CODER_PASSWORD
+      [94m--[0m[94mpassword[0m string, [94m$CODER_PASSWORD[0m
          The password of the new user. If not specified, you will be prompted
          via stdin.

-      --postgres-url string, $CODER_PG_CONNECTION_URL
+      [94m--[0m[94mpostgres-url[0m string, [94m$CODER_PG_CONNECTION_URL[0m
          URL of a PostgreSQL database. If empty, the built-in PostgreSQL
          deployment will be used (Coder must not be already running in this
          case).

-      --raw-url bool
+      [94m--[0m[94mraw-url[0m bool
          Output the raw connection URL instead of a psql command.

-      --ssh-keygen-algorithm string, $CODER_SSH_KEYGEN_ALGORITHM (default: ed25519)
+      [94m--[0m[94mssh-keygen-algorithm[0m string, [94m$CODER_SSH_KEYGEN_ALGORITHM[0m (default: ed25519)
          The algorithm to use for generating ssh keys. Accepted values are
          "ed25519", "ecdsa", or "rsa4096".

-      --username string, $CODER_USERNAME
+      [94m--[0m[94musername[0m string, [94m$CODER_USERNAME[0m
          The username of the new user. If not specified, you will be prompted
          via stdin.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,12 +1,15 @@
-Usage: coder server dbcrypt
+coder v0.0.0-devel

-Manage database encryption.
+[93mUSAGE:[0m
+  coder server dbcrypt

-[1mSubcommands[0m
+  Manage database encryption.
+
+[93mSUBCOMMANDS:[0m
    decrypt    Decrypt a previously encrypted database.
    delete     Delete all encrypted data from the database. THIS IS A
               DESTRUCTIVE OPERATION.
    rotate     Rotate database encryption keys.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,17 +1,20 @@
-Usage: coder server dbcrypt decrypt [flags]
+coder v0.0.0-devel

-Decrypt a previously encrypted database.
+[93mUSAGE:[0m
+  coder server dbcrypt decrypt [flags]

-[1mOptions[0m
-      --keys string-array, $CODER_EXTERNAL_TOKEN_ENCRYPTION_DECRYPT_KEYS
+  Decrypt a previously encrypted database.
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mkeys[0m string-array, [94m$CODER_EXTERNAL_TOKEN_ENCRYPTION_DECRYPT_KEYS[0m
          Keys required to decrypt existing data. Must be a comma-separated list
          of base64-encoded keys.

-      --postgres-url string, $CODER_PG_CONNECTION_URL
+      [94m--[0m[94mpostgres-url[0m string, [94m$CODER_PG_CONNECTION_URL[0m
          The connection URL for the Postgres database.

-  -y, --yes bool
+  [94m-[0m[94my[0m, [94m--[0m[94myes[0m bool
          Bypass prompts.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,15 +1,18 @@
-Usage: coder server dbcrypt delete [flags]
+coder v0.0.0-devel

-Delete all encrypted data from the database. THIS IS A DESTRUCTIVE OPERATION.
+[93mUSAGE:[0m
+  coder server dbcrypt delete [flags]

-Aliases: rm
+  Delete all encrypted data from the database. THIS IS A DESTRUCTIVE OPERATION.

-[1mOptions[0m
-      --postgres-url string, $CODER_EXTERNAL_TOKEN_ENCRYPTION_POSTGRES_URL
+  Aliases: rm
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mpostgres-url[0m string, [94m$CODER_EXTERNAL_TOKEN_ENCRYPTION_POSTGRES_URL[0m
          The connection URL for the Postgres database.

-  -y, --yes bool
+  [94m-[0m[94my[0m, [94m--[0m[94myes[0m bool
          Bypass prompts.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,20 +1,23 @@
-Usage: coder server dbcrypt rotate [flags]
+coder v0.0.0-devel

-Rotate database encryption keys.
+[93mUSAGE:[0m
+  coder server dbcrypt rotate [flags]

-[1mOptions[0m
-      --new-key string, $CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_NEW_KEY
+  Rotate database encryption keys.
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mnew-key[0m string, [94m$CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_NEW_KEY[0m
          The new external token encryption key. Must be base64-encoded.

-      --old-keys string-array, $CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_OLD_KEYS
+      [94m--[0m[94mold-keys[0m string-array, [94m$CODER_EXTERNAL_TOKEN_ENCRYPTION_ENCRYPT_OLD_KEYS[0m
          The old external token encryption keys. Must be a comma-separated list
          of base64-encoded keys.

-      --postgres-url string, $CODER_PG_CONNECTION_URL
+      [94m--[0m[94mpostgres-url[0m string, [94m$CODER_PG_CONNECTION_URL[0m
          The connection URL for the Postgres database.

-  -y, --yes bool
+  [94m-[0m[94my[0m, [94m--[0m[94myes[0m bool
          Bypass prompts.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,10 +1,13 @@
-Usage: coder server postgres-builtin-serve [flags]
+coder v0.0.0-devel

-Run the built-in PostgreSQL deployment.
+[93mUSAGE:[0m
+  coder server postgres-builtin-serve [flags]

-[1mOptions[0m
-      --raw-url bool
+  Run the built-in PostgreSQL deployment.
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mraw-url[0m bool
          Output the raw connection URL instead of a psql command.

---
+———
 Run `coder --help` for a list of global options.
@@ -1,10 +1,13 @@
-Usage: coder server postgres-builtin-url [flags]
+coder v0.0.0-devel

-Output the connection URL for the built-in PostgreSQL deployment.
+[93mUSAGE:[0m
+  coder server postgres-builtin-url [flags]

-[1mOptions[0m
-      --raw-url bool
+  Output the connection URL for the built-in PostgreSQL deployment.
+
+[93mOPTIONS:[0m
+      [94m--[0m[94mraw-url[0m bool
          Output the raw connection URL instead of a psql command.

---
+———
 Run `coder --help` for a list of global options.