amaters-server 0.2.0

AmateRS server binary
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

# Example AmateRS Server configuration with authentication and authorization enabled

[server]
bind_address = "0.0.0.0:7878"
data_dir = "./data"
pid_file = "/var/run/amaters-server.pid"
max_connections = 1000
shutdown_timeout_secs = 30

[storage]
engine = "lsm"
memtable_size_mb = 64
block_cache_size_mb = 256

[storage.wal]
enabled = true
dir = "wal"
segment_size_mb = 64
sync_mode = "interval"

[storage.compaction]
strategy = "leveled"
num_levels = 7
level_multiplier = 10
max_concurrent = 4

[network]
tls_enabled = true
tls_cert = "/etc/amaters/certs/server.crt"
tls_key = "/etc/amaters/certs/server.key"
tls_ca = "/etc/amaters/certs/ca.crt"
require_client_cert = true
connection_timeout_secs = 30
keepalive_interval_secs = 60

[logging]
level = "info"
format = "json"
file_enabled = true
file_path = "/var/log/amaters/server.log"

[logging.rotation]
enabled = true
max_size_mb = 100
max_backups = 10

[metrics]
enabled = true
bind_address = "127.0.0.1:9090"
export_interval_secs = 60

# Authentication configuration
[auth]
enabled = true
methods = ["mtls", "jwt", "api_key"]
reject_unauthenticated = true

# mTLS authentication
[auth.mtls]
enabled = true
ca_certs_dir = "/etc/amaters/certs/trusted_cas"
crl_path = "/etc/amaters/certs/crl.pem"
verify_cn = true
allowed_organizations = ["COOLJAPAN OU", "Trusted Partner Inc"]

# JWT authentication
[auth.jwt]
enabled = true
secret = "your-secret-key-change-this-in-production"
algorithm = "HS256"
expiration_secs = 3600
issuer = "amaters-server"
audience = "amaters-clients"

# API key authentication
[auth.api_key]
enabled = true
keys_file = "/etc/amaters/api_keys.json"
header_name = "X-API-Key"
hash_keys = true

# Authorization configuration
[authz]
enabled = true
default_role = "user"
roles_file = "/etc/amaters/roles.toml"
collection_permissions = true
default_mode = "deny-by-default"
audit_enabled = true
audit_log_path = "/var/log/amaters/audit.jsonl"