rust-web-server 18.9.0

Single-binary web server and reverse proxy: automatic HTTPS (Let's Encrypt), HTTP/1.1, HTTP/2 and HTTP/3, load balancing, auth and rate limiting, configured in one TOML file. Also a Rust library: routing, middleware, MCP server, ORM, background jobs. No hyper, no Tower; HTTP/2 and HTTP/3 framing via h2 and quinn.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

# ── build stage ──────────────────────────────────────────────────────────────
FROM rust:1.99-slim AS builder

# aws-lc-rs (used by rustls) needs cmake, clang, and a C linker
RUN apt-get update && apt-get install -y --no-install-recommends \
    cmake clang pkg-config && \
    rm -rf /var/lib/apt/lists/*

WORKDIR /app
COPY . .
RUN cargo build --release

# ── runtime stage ─────────────────────────────────────────────────────────────
# gcr.io/distroless/cc includes only the C runtime libraries needed for
# statically-linked Rust + aws-lc-rs. No shell, no package manager.
FROM gcr.io/distroless/cc-debian12

COPY --from=builder /app/target/release/rws /usr/local/bin/rws

# Default port — override at runtime with RWS_CONFIG_PORT
EXPOSE 7878

# The server binds 0.0.0.0 by default so the K8s Service can reach it.
# Pass TLS paths via env vars or volume mounts:
#   -e RWS_CONFIG_TLS_CERT_FILE=/certs/tls.crt
#   -e RWS_CONFIG_TLS_KEY_FILE=/certs/tls.key
CMD ["/usr/local/bin/rws"]