flexd 0.2.5

Hardened web server and reverse proxy: TLS/HTTP3, ACME, rate limiting, host policy, GeoIP, A/B splitting, privilege dropping
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

//! flexd command-line entry point.
//!
//! This binary is deliberately thin: it parses arguments, installs the rustls
//! crypto provider and the tracing subscriber, loads and validates the
//! configuration, and hands off to [`flexd::server::Server`]. All real logic
//! lives in the [`flexd`] library so it can be tested without a socket.
//!
//! ```text
//! flexd --config flexd.conf --test   # validate config and exit
//! flexd --config flexd.conf          # run
//! ```

use anyhow::Result;
use clap::Parser;
use flexd::config::Config;
use flexd::server::Server;
use std::path::PathBuf;
use tracing::info;

/// Parsed command-line arguments.
#[derive(Parser, Debug)]
#[command(name = "flexd")]
#[command(about = "flexd - hardened web server", long_about = None)]
struct Args {
    /// Path to the configuration file. Defaults to `./flexd.conf`.
    #[arg(long, help = "Path to configuration file")]
    config: Option<PathBuf>,

    /// Validate the configuration and exit without serving.
    #[arg(long, help = "Test configuration and exit")]
    test: bool,
}

#[tokio::main]
async fn main() -> Result<()> {
    // Install rustls crypto provider before any TLS operations
    let _ = rustls::crypto::ring::default_provider().install_default();

    let args = Args::parse();

    tracing_subscriber::fmt()
        .with_env_filter(
            tracing_subscriber::EnvFilter::try_from_default_env()
                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
        )
        .init();

    let config_path = args.config.unwrap_or_else(|| PathBuf::from("./flexd.conf"));

    info!("Loading configuration from {}", config_path.display());

    let config = Config::load(&config_path)?;

    if args.test {
        info!("Configuration validated successfully");
        println!("configuration OK");
        return Ok(());
    }

    info!("Starting flexd server");

    let server = Server::new(config);
    server.run().await?;

    info!("Server stopped");
    Ok(())
}