Re-exports§
pub use reqwest;
Modules§
- registration
- Single, machine-bound, encrypted store for this host’s canopy enrollment.
- schema
- Wire types generated at build time from canopy’s OpenAPI document.
Structs§
- Backup
Credentials credential_process-shaped creds returned byPOST /backup-credentials.- Backup
Credentials Request - Body for
POST /backup-credentials. - Backup
Report - Body for
POST /backup-report. - Backup
Target - The S3 repo target returned by
GET /backup-target. - Canopy
Client - HTTP client with auth configured for talking to a canopy server.
- Capabilities
Request - Body for
POST /backup-capabilities: the backup types this server can run. - Container
Creds - Creds in the ECS container-credentials shape kopia’s minio-go provider polls
for: note
Token(notSessionToken), andExpirationas RFC3339Z. - NewEvent
- Payload for posting to
POST /eventson a canopy server. - Redacted
- Wraps a sensitive value so its
Debugoutput doesn’t leak the contents. - Restore
Capabilities Request - Body for
POST /restore-capabilities: the restore intents this consumer supports. - Restore
Credentials - Read-only S3 credentials plus the repo password, from
POST /restore-credentials. - Restore
Credentials Request - Body for
POST /restore-credentials. - Restore
Verification - Body for
POST /restore-verification: a restore’s reported health. - Worklist
Entry - One entry of
GET /restore-worklist: a concrete replica to restore.
Enums§
- Outcome
- Outcome of a reported backup/restore run.
- Purpose
- Why a credential was issued / a run executed.
- Severity
- Severities accepted by the canopy
/eventsAPI. - Target
Outcome - Result of
GET /backup-target: a live target, or the benign dormant state (the device is not yet authorised for backups —412/409).
Constants§
- CERT_
RENEW_ AFTER - How long to wait between scheduled cert renewals.
- DEFAULT_
CANOPY_ URL - TAILSCALE_
URL - Base URL for the tailscale-internal canopy endpoint.
Functions§
- client_
builder - A
reqwest::ClientBuildercarrying thebestooluser_agentforversion. - device_
identity - Build a short-lived self-signed client certificate from a P-256 device key
PEM and wrap it as a reqwest mTLS [
Identity]. - tailscale_
client - Probe the canopy tailnet endpoint, returning a client routed to it if reachable.
- user_
agent - Browser-style user-agent string, e.g.
bestool/1.2.3 (Linux 7.0.9 Arch Linux; x86_64).
Type Aliases§
- Client
Builder Factory - Factory producing the base
reqwest::ClientBuilderfor canopy’s clients.