Struct HttpConfig 

pub struct HttpConfig {
    pub port: u16,
    pub hostname: String,
    pub api_token_id: Option<String>,
    pub rate_limit_per_second: Option<u32>,
    pub cors_allowed_origins: Option<Vec<String>>,
    pub http_workers: Option<usize>,
    pub jwks_enabled: bool,
}

Fields

port: u16

The KMS HTTP server port

hostname: String

The KMS HTTP server hostname

api_token_id: Option<String>

An optional API token to use for authentication on the HTTP server.

rate_limit_per_second: Option<u32>

Maximum number of requests per second per IP address allowed by the rate limiter. When set, the server enforces this limit to mitigate DoS and brute-force attacks. Requests exceeding the limit receive HTTP 429 Too Many Requests. Leave unset (default) to disable rate limiting.

cors_allowed_origins: Option<Vec<String>>

Comma-separated list of origins allowed to make cross-origin requests to the KMIP API. Required for any Web UI deployment: the browser Fetch API sends an Origin header on every POST request — even when the page is served by the KMS itself — and actix-cors rejects it unless the exact origin appears in this list. The value must match byte-for-byte what the user types in the browser address bar (scheme + hostname + port). The server bind address (0.0.0.0) and the server IP are not equivalent to a DNS hostname. The Docker image pre-populates loopback addresses; add any custom hostname explicitly. Example: http://kms.example.com:9998.

http_workers: Option<usize>

Number of actix-web HTTP worker threads. Defaults to the number of logical CPUs. On I/O-heavy workloads (e.g. PostgreSQL backend) setting this to 2 * <number of CPU cores> improves throughput by keeping more Tokio threads busy while others are waiting on network I/O. Can also be set via the TOKIO_WORKER_THREADS environment variable (Tokio runtime), but this flag controls only the actix-web application workers.

jwks_enabled: bool

Enable the GET /.well-known/jwks.json endpoint.

When set, the server exposes all public keys with the Verify usage mask as a RFC 7517 JSON Web Key Set. Defaults to false; set to true to enable public key discovery for JWT verification.

Implementations

impl HttpConfig

pub const fn scheme<'a>(&self, tls: &'a TlsConfig) -> &'a str

Returns the correct scheme ("http" or "https") based on the companion TlsConfig. Use this when building log messages or client URLs where the scheme must be accurate.

Trait Implementations

impl Args for HttpConfig

fn group_id() -> Option<Id>

Report the ArgGroup::id for this set of arguments

fn augment_args<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate Self via FromArgMatches::from_arg_matches_mut

fn augment_args_for_update<'b>(__clap_app: Command) -> Command

Append to Command so it can instantiate self via FromArgMatches::update_from_arg_matches_mut

impl Clone for HttpConfig

fn clone(&self) -> HttpConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl ConfigFallback for HttpConfig

type Opts = HttpConfigOpts

Intermediate optional representation used during merge.

type Config = HttpConfigConfig

Config-only representation loaded from file.

impl Debug for HttpConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for HttpConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for HttpConfig

where HttpConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for HttpConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl FromArgMatches for HttpConfig

fn from_arg_matches(__clap_arg_matches: &ArgMatches) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn from_arg_matches_mut( __clap_arg_matches: &mut ArgMatches, ) -> Result<Self, Error>

Instantiate Self from ArgMatches, parsing the arguments as needed.

fn update_from_arg_matches( &mut self, __clap_arg_matches: &ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

fn update_from_arg_matches_mut( &mut self, __clap_arg_matches: &mut ArgMatches, ) -> Result<(), Error>

Assign values from ArgMatches to self.

impl Serialize for HttpConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.