Struct AdminConfig 

pub struct AdminConfig {
    pub enabled: bool,
    pub bind_address: String,
    pub base_url: String,
    pub session_ttl_seconds: u64,
    pub session_idle_timeout_seconds: u64,
    pub login_max_attempts: u32,
    pub login_window_seconds: u64,
    pub require_mfa: bool,
    pub max_body_bytes: usize,
    pub page_size_max: i64,
    pub template_dir: String,
    pub tls: AdminTlsConfig,
}

The web admin interface: a second listener, on its own socket, serving no ACME.

Process-wide, not per-profile – an operator manages every endpoint this process serves, so there is no [profiles.<name>].admin and this is not in PROFILE_SECTIONS.

Off by default. A certificate authority should not grow a management surface because somebody upgraded it.

Fields

enabled: bool

bind_address: String

Loopback on purpose. This listener has no admission control and no filter chain, and until AdminTlsConfig::enabled is set, no transport security either. webadmin::check_config refuses to start on a non-loopback bind while TLS is off.

base_url: String

The origin the panel is reached at. Load-bearing three times over: the CSRF origin check compares against it, a generated self-signed certificate takes its host, and the pages will build absolute URLs from it – exactly as server.base_url does for the ACME listener.

session_ttl_seconds: u64

Absolute session lifetime. Never extended by activity: past it, the operator signs in again.

session_idle_timeout_seconds: u64

Idle session lifetime, advanced on use (at most once a minute, so a polling page is not a stream of database writes).

login_max_attempts: u32

Failed logins allowed from one address per window, then 429 with a Retry-After. The password hash is deliberately expensive, so this is an availability control as much as a credential one.

login_window_seconds: u64

require_mfa: bool

Require a second factor of every operator.

What this changes is the operator who has none: with it on, their next sign-in lands on the enrolment page and their session stays pending_mfa until they finish. An operator who already has a factor is challenged whether this is set or not – the flag governs enrolment, not enforcement.

Deliberately not “refuse a password-only login”: enrolling needs a session and a session would then need a factor, so setting this on a panel with no enrolled operator would brick it, with no way in to fix it.

Does not retroactively end sessions that predate it. The lever that does is acme-proxy admin session revoke --all.

max_body_bytes: usize

Largest admin request body – a small JSON object or a form.

page_size_max: i64

Ceiling on ?limit= for the list endpoints.

template_dir: String

Override individual page templates on disk, mirroring notify.template_dir. Empty means the compiled-in defaults.

tls: AdminTlsConfig

Trait Implementations

impl Clone for AdminConfig

fn clone(&self) -> AdminConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AdminConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AdminConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AdminConfig

where AdminConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.