acme-proxy 0.5.0

An ACME (RFC 8555) server that issues from a local CA, relays to an upstream CA, or delegates to a script
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

//! `[profiles.<name>]` — the per-endpoint overlay, plus `[eab]`.
//!
//! Re-exported flat from [`super`], so nothing outside this directory names
//! the submodule.

use serde::Deserialize;

use super::challenge::ChallengeConfig;
use super::filter::FilterConfig;
use super::ipam::IpamConfig;
use super::notify::NotifyConfig;
use super::server::{MetaConfig, OrderConfig};
use super::signer::SignerConfig;

/// One ACME endpoint's configuration: the eight sections a profile may carry,
/// plus the marker that declares it.
///
/// Every field is optional in the file — what a profile does not say, it
/// inherits from the matching global section (see `Config::resolve_profiles`),
/// key by key. So `[profiles.le]` alone is a complete profile, identical to the
/// global configuration but served under its own URL prefix.
#[derive(Debug, Clone, Deserialize)]
#[serde(default)]
pub struct ProfileSections {
    /// Whether to mount this profile at all. Defaults to `true`: a profile
    /// exists because it is written down. It is a bool rather than a bare
    /// marker for two reasons — an operator can park an endpoint without
    /// deleting its configuration, and an environment-only profile needs at
    /// least one key to exist at all (`ACME_PROXY_PROFILES__LE__ENABLED=true`).
    pub enabled: bool,
    pub signer: SignerConfig,
    pub filter: FilterConfig,
    pub ipam: IpamConfig,
    pub challenge: ChallengeConfig,
    pub eab: EabConfig,
    pub order: OrderConfig,
    pub notify: NotifyConfig,
    pub meta: MetaConfig,
}

impl Default for ProfileSections {
    fn default() -> Self {
        Self {
            enabled: true,
            signer: SignerConfig::default(),
            filter: FilterConfig::default(),
            ipam: IpamConfig::default(),
            challenge: ChallengeConfig::default(),
            eab: EabConfig::default(),
            meta: MetaConfig::default(),
            order: OrderConfig::default(),
            notify: NotifyConfig::default(),
        }
    }
}
/// A named, fully resolved profile: its name (which is also its URL segment,
/// `/profile/<name>`) and the sections it ended up with after inheritance.
#[derive(Debug, Clone)]
pub struct ProfileConfig {
    pub name: String,
    pub sections: ProfileSections,
}
/// External Account Binding (RFC 8555 §7.3.4) requirement.
#[derive(Debug, Clone, Deserialize, Default)]
#[serde(default)]
pub struct EabConfig {
    pub enabled: bool,
}