cronoq-server 0.2.1

gRPC/HTTP server for the cronoq scheduler with remote workers
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

//! Postgres store wiring.

use cronoq_store_postgres::{PgStore, PgStoreConfig};

/// Connect (applying migrations).
pub async fn open(
    url: &str,
    schema: Option<&str>,
    retention: std::time::Duration,
) -> anyhow::Result<crate::store::Opened> {
    let mut cfg = PgStoreConfig {
        retention,
        ..Default::default()
    };
    if let Some(s) = schema {
        cfg.schema = s.into();
    }
    let pg = PgStore::connect_with(url, cfg)
        .await
        .map_err(|e| anyhow::anyhow!("postgres: {e}"))?;
    Ok(crate::store::Opened::durable(pg))
}

/// Warn about connection settings that are risky outside a trusted network.
pub fn warn_insecure_url(url: &str, inline: bool) {
    if inline {
        tracing::warn!(
            "store.url is set inline in the config file; prefer store.url_env to keep credentials out of files"
        );
    }
    let lower = url.to_ascii_lowercase();
    let local = ["@localhost", "@127.0.0.1", "@[::1]", "host=/", "@/"]
        .iter()
        .any(|h| lower.contains(h));
    if !local && !lower.contains("sslmode=verify-full") && !lower.contains("sslmode=verify-ca") {
        tracing::warn!(
            "the Postgres URL does not set sslmode=verify-full; connections to a remote database may be unencrypted or unauthenticated"
        );
    }
}