Crate bestool_canopy 

Re-exports

pub use bytes;

pub use http;

pub use reqwest;

Modules

registration

Single, machine-bound, encrypted store for this host’s canopy enrollment.

schema

Wire types generated at build time from canopy’s OpenAPI document.

Structs

CanopyClient

Typed client for canopy’s API.

CanopyHttpError

A non-2xx response from a canopy endpoint.

ContainerCreds

Creds in the ECS container-credentials shape kopia’s minio-go provider polls for: note Token (not SessionToken), and Expiration as RFC3339 Z.

Redacted

Wraps a sensitive value so its Debug output doesn’t leak the contents.

ReqwestTransport

The default canopy transport: HTTP with auth configured for talking to a canopy server.

Enums

TargetOutcome

Result of GET /backup-target: a live target, or the benign dormant state (the device is not yet authorised for backups — 412/409).

Constants

CERT_RENEW_AFTER

How long to wait between scheduled cert renewals.

DEFAULT_CANOPY_URL

TAILSCALE_URL

Base URL for the tailscale-internal canopy endpoint.

Traits

CanopyTransport

The HTTP transport a CanopyClient sends through.

Functions

device_identity

Build a short-lived self-signed client certificate from a P-256 device key PEM and wrap it as a reqwest mTLS Identity.

tailscale_client

Probe the canopy tailnet endpoint, returning a client routed to it if reachable.

Type Aliases

CanopyRequest

A request built by CanopyClient, ready for a CanopyTransport to send.

CanopyResponse

A response handed back to CanopyClient by a CanopyTransport, with its body buffered.

ClientBuilderFactory

Factory producing the base reqwest::ClientBuilder for canopy’s clients.

Attribute Macros

async_trait