Struct EnrollConfig 

pub struct EnrollConfig {
    pub registry_path: Option<PathBuf>,
    pub require_code: bool,
    pub tls_only: bool,
    pub pool: Option<TunnelPool>,
    pub listen: SocketAddr,
    pub provisioner: Arc<dyn PeerProvisioner>,
    pub public: PublicInfo,
    pub rate_limit_per_minute: u32,
    pub policy_path: Option<PathBuf>,
    pub build_host: Option<(SocketAddr, String)>,
    pub server_upstream: Option<(SocketAddr, String)>,
    pub node_call_sink: Option<Arc<dyn NodeCallSink>>,
}

Fields

registry_path: Option<PathBuf>

require_code: bool

Default true: enrollment only with a one-time operator code.

tls_only: bool

Code enrollments only from a loopback peer (the TLS proxy on this host). A code sent in the clear from any other peer is burned (it was exposed) and the request refused.

pool: Option<TunnelPool>

listen: SocketAddr

Where nodes POST their enrollment request.

provisioner: Arc<dyn PeerProvisioner>

public: PublicInfo

rate_limit_per_minute: u32

Requests per source address per minute (applies to every request, valid or not).

policy_path: Option<PathBuf>

Status -> capability policy file (JSON); None uses the built-in table.

build_host: Option<(SocketAddr, String)>

Build host to forward admitted POST /v1/build requests to, and the bearer it expects.

server_upstream: Option<(SocketAddr, String)>

Deprecated (A2): previously the core address C2 pushed node-calls to. Ignored — C2 never dials core; retained so old configs still parse.

node_call_sink: Option<Arc<dyn NodeCallSink>>

In-process sink for admitted node calls (no network push to core).

Implementations

impl EnrollConfig

pub fn new(listen: SocketAddr) -> Self

Trait Implementations

impl Clone for EnrollConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.