Crate bestool_canopy 

Modules

registration

Single, machine-bound, encrypted store for this host’s canopy enrollment.

Structs

CanopyClient

HTTP client with auth configured for talking to a canopy server.

NewEvent

Payload for posting to POST /events on a canopy server.

Redacted

Wraps a sensitive value so its Debug output doesn’t leak the contents.

Enums

Severity

Severities accepted by the canopy /events API.

Constants

CERT_RENEW_AFTER

How long to wait between scheduled cert renewals.

DEFAULT_CANOPY_URL

TAILSCALE_URL

Base URL for the tailscale-internal canopy endpoint.

Functions

client_builder

A reqwest::ClientBuilder carrying the bestool user_agent for version.

device_identity

Build a short-lived self-signed client certificate from a P-256 device key PEM and wrap it as a reqwest mTLS [Identity].

tailscale_client

Probe the canopy tailnet endpoint, returning a client routed to it if reachable.

user_agent

Browser-style user-agent string, e.g. bestool/1.2.3 (Linux 7.0.9 Arch Linux; x86_64).

Type Aliases

ClientBuilderFactory

Factory producing the base reqwest::ClientBuilder for canopy’s clients.