trz-gateway-server 0.1.6

Secure Proxy / Agents implementation in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46

use trz_gateway_common::is_global::IsGlobal;
use trz_gateway_common::security_configuration::HasSecurityConfig;
use trz_gateway_common::security_configuration::certificate::CertificateConfig;

use self::app_config::AppConfig;

pub mod app_config;
mod arc;

/// Configuration for the Terrazzo Gateway.
pub trait GatewayConfig: IsGlobal {
    /// Whether to enable tracing.
    fn enable_tracing(&self) -> bool {
        true
    }

    /// Host to listen to.
    fn host(&self) -> &str {
        "127.0.0.1"
    }

    /// Port to listen to.
    fn port(&self) -> u16 {
        if cfg!(debug_assertions) { 3000 } else { 3001 }
    }

    /// The root CA is used to issue the client certificates.
    ///
    /// This asset is never rotated, even if the private key leaks.
    /// Security is based on the signed extension of client certificates.
    type RootCaConfig: HasSecurityConfig;
    fn root_ca(&self) -> Self::RootCaConfig;

    /// The TLS certificate used to listen to HTTPS connections.
    type TlsConfig: CertificateConfig;
    fn tls(&self) -> Self::TlsConfig;

    /// The certificate used to sign the custom extension of X509 certificates.
    type ClientCertificateIssuerConfig: HasSecurityConfig;
    fn client_certificate_issuer(&self) -> Self::ClientCertificateIssuerConfig;

    /// Configures the routes served by Terrazzo Gateway HTTP server.
    fn app_config(&self) -> impl AppConfig {
        |router| router
    }
}