Struct OnDemandTlsConfig 

pub struct OnDemandTlsConfig {
    pub enabled: bool,
    pub challenge: OnDemandChallenge,
    pub directory_url: Option<String>,
    pub contact_email: Option<String>,
    pub max_inflight: Option<usize>,
    pub negative_ttl_secs: Option<u64>,
    pub rate_limit_per_hour: Option<u32>,
}

[serve.on_demand_tls] — on-demand per-SNI TLS issuance (cap-req 03). Off unless enabled. When on, an unknown-but-#02-verified SNI triggers issuance at handshake time (the client retries once the cert is warm); an unauthorized SNI is refused, so a flood of unknown names can’t become an ACME storm. The ACME account + issued certs persist in the control-plane cert store and replicate across the cluster (the leader issues; followers serve the replicated cert).

Fields

enabled: bool

Master toggle. false (default) ⇒ the whole feature is off.

challenge: OnDemandChallenge

How to prove control of a name to the CA. tls-alpn-01 (default) validates on the 443 edge (no extra port); dns-01 uses the node’s configured ACME DNS provider (an operator-controlled zone).

directory_url: Option<String>

ACME directory URL. Absent ⇒ the ACME client default (Let’s Encrypt production).

contact_email: Option<String>

ACME account contact email (optional).

max_inflight: Option<usize>

Max concurrent in-flight issuances (global). Absent ⇒ 4.

negative_ttl_secs: Option<u64>

How long a refused/failed SNI is negatively cached (seconds). Absent ⇒ 300.

rate_limit_per_hour: Option<u32>

Max CA orders per rolling hour (the account rate-limit floor). Absent ⇒ 50; 0 ⇒ unlimited.

Trait Implementations

impl Clone for OnDemandTlsConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OnDemandTlsConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OnDemandTlsConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for OnDemandTlsConfig

where OnDemandTlsConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for OnDemandTlsConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.