Struct AcmeCfg 

pub struct AcmeCfg {
    pub enabled: bool,
    pub domains: Vec<String>,
    pub email: String,
    pub directory_url: String,
    pub cache_dir: String,
    pub accept_tos: bool,
    pub budget_enabled: bool,
}

Automatic certificate management (ACME / Let’s Encrypt) via the HTTP-01 challenge. The obtained certificate is written to TlsCfg::cert_path/key_path and served by the TLS listener. Issuance runs at startup only when no certificate exists at cert_path; there is no automatic renewal yet (see docs/ROADMAP.md) — delete the cert/key files and restart to re-issue.

Fields

enabled: bool

Obtain and renew a certificate automatically over ACME HTTP-01 instead of reading cert_path/key_path from disk. Requires port 80 to be reachable from the CA.

domains: Vec<String>

Domains to request a certificate for (the first is the primary CN).

email: String

Contact email for the ACME account (registration + expiry notices).

directory_url: String

ACME directory URL. Defaults to Let’s Encrypt staging so a misconfiguration can’t burn the strict production rate limits; switch to production explicitly.

cache_dir: String

Directory for the cached ACME account key (so renewals reuse the same account).

accept_tos: bool

You must set this to true to signify acceptance of the ACME provider’s Terms of Service; EdgeGuard refuses to register otherwise.

budget_enabled: bool

Refuse to send an order the CA’s published rate limits would reject, instead of finding out by being refused. On by default. See crate::acme_budget.

Only recognised CAs are budgeted — an unknown directory URL gets no profile and no guard, because holding a private CA to Let’s Encrypt’s numbers would refuse orders it would have accepted. Turn this off only if the budget is wrong about your CA and you would rather have the CA be the one that says no.

This governs this edge’s own ledger only. In managed mode the control plane still issues the fleet-wide issuance lease, because limits the CA applies across every edge under one registered domain are not this edge’s to opt out of — one box turning this off would otherwise be able to spend the whole fleet’s weekly allowance.

Trait Implementations

impl Clone for AcmeCfg

fn clone(&self) -> AcmeCfg

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AcmeCfg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AcmeCfg

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for AcmeCfg

where AcmeCfg: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.