1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
//! Configuration for the Terrazzo Gateway.
use std::path::PathBuf;
use trz_gateway_common::is_global::IsGlobal;
use trz_gateway_common::security_configuration::HasDynamicSecurityConfig;
use trz_gateway_common::security_configuration::HasSecurityConfig;
use trz_gateway_common::security_configuration::certificate::CertificateConfig;
use self::app_config::AppConfig;
pub mod app_config;
mod arc;
pub trait Ports: std::ops::Deref<Target = [u16]> + Clone + std::fmt::Debug {}
impl<T: std::ops::Deref<Target = [u16]> + Clone + std::fmt::Debug> Ports for T {}
/// Configuration for the Terrazzo Gateway.
pub trait GatewayConfig: IsGlobal + std::fmt::Debug {
/// Whether to enable tracing.
fn enable_tracing(&self) -> bool {
true
}
/// Host to listen to.
fn host(&self) -> String {
"127.0.0.1".into()
}
/// Port to listen to.
fn ports(&self) -> impl Ports + 'static {
vec![if cfg!(debug_assertions) { 3000 } else { 3001 }]
}
fn set_current_endpoint(&self) -> Option<PathBuf> {
None
}
/// The root CA is used to issue the client certificates.
///
/// This asset is never rotated, even if the private key leaks.
/// Security is based on the signed extension of client certificates.
type RootCaConfig: HasSecurityConfig + Clone + std::fmt::Debug;
/// See [GatewayConfig::RootCaConfig]
fn root_ca(&self) -> Self::RootCaConfig;
/// The TLS certificate used to listen to HTTPS connections.
///
/// This certificate must share the same PKI as the [client certificate issuer](GatewayConfig::client_certificate_issuer).
type TlsConfig: CertificateConfig + std::fmt::Debug;
/// See [GatewayConfig::TlsConfig]
fn tls(&self) -> Self::TlsConfig;
/// The certificate used to sign and validate the custom extension
/// of client X509 certificates.
///
/// This certificate must share the same PKI as the [TLS server certificate](GatewayConfig::tls).
type ClientCertificateIssuerConfig: HasDynamicSecurityConfig + std::fmt::Debug;
/// See [GatewayConfig::ClientCertificateIssuerConfig]
fn client_certificate_issuer(&self) -> Self::ClientCertificateIssuerConfig;
/// Configures the routes served by Terrazzo Gateway HTTP server.
fn app_config(&self) -> impl AppConfig {
|_server, router| router
}
}