Struct AuditConfig 

pub struct AuditConfig {
    pub reverse_dns: bool,
    pub reverse_dns_timeout_ms: u64,
    pub retention_days: u64,
}

Governs the traceability columns and the audit_log table.

Process-wide, so deliberately absent from PROFILE_SECTIONS: the retention sweep is one pass over one table, and an audit trail that recorded different things at different endpoints of the same CA would be the wrong shape for the question it exists to answer.

There is no enabled key. Recording who asked the CA to sign something is not a feature of this server, it is what a CA does; the only thing an operator can turn off here is the reverse lookup, because that one costs a network round trip and has estates where it can never succeed.

Fields

reverse_dns: bool

Resolve a PTR record for the client’s address and freeze it into the row.

On by default. Turn it off on an estate with no usable reverse zone: the lookups would all fail, every *_ptr would be NULL anyway, and the only thing left would be the round trip.

reverse_dns_timeout_ms: u64

Budget for one PTR lookup.

Small on purpose: this runs inside a request that has already done its real work, and a slow nameserver must cost a NULL in one column rather than latency on issuance. Matches filter.reverse_dns.timeout_ms, whose lookup is against the same nameserver.

retention_days: u64

Delete audit_log rows older than this many days.

0 (the default) keeps everything for ever, which is the right default for a trail whose value is that it is complete. Set it where a retention policy says otherwise; acme-proxy audit cleanup --older-than is the same sweep run by hand.

Trait Implementations

impl Clone for AuditConfig

fn clone(&self) -> AuditConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AuditConfig

where AuditConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.