Struct GatewayServerConfig 

pub struct GatewayServerConfig {
    pub seats: Option<u32>,
    pub org_label: Option<String>,
    pub admin_url: Option<String>,
    pub admin_bind_host: Option<String>,
    pub usage_retention_days: Option<u32>,
    pub pseudonymize_persons: Option<bool>,
}

Semantic-embedding engine settings.

model selects which local ONNX embedding model lean-ctx downloads and uses for ctx_semantic_search. Accepts the same aliases as the LEAN_CTX_EMBEDDING_MODEL env var: minilm (all-MiniLM-L6-v2, 384d — the default), nomic (768d) — or any HuggingFace repo with an ONNX export via hf:org/repo[@revision] (GL #397), e.g. hf:jinaai/jina-embeddings-v2-base-code for code-specialized embeddings. When the env var is set it takes precedence; an unset/None value uses the default model. Switching models triggers a one-time re-index on the next semantic search (vector dimensions follow from the model).

dimensions is only consulted for hf: custom models as the declared fallback width; the real width is probed from the ONNX graph at load time. Built-ins ignore it. [gateway_server] — deployment parameters of the self-hosted org gateway (enterprise#20). Distinct from [gateway] (the MCP tool-catalog gateway): this section describes the LLM-proxy server deployment and its cockpit.

All fields optional; an empty section keeps every local behavior unchanged.

Fields

seats: Option<u32>

Seats the org-wide projection extrapolates to (e.g. 800). None disables the projection — the cockpit never invents a seat count.

org_label: Option<String>

Display label for the cockpit header (e.g. "Zühlke AI Gateway").

admin_url: Option<String>

Central admin API base URL (e.g. https://ai-gateway.example.com). When set, the local cockpit’s usage breakdown reads the org-wide GET /api/admin/usage instead of the machine-local snapshot. The bearer token comes from LEAN_CTX_GATEWAY_ADMIN_TOKEN (never config).

admin_bind_host: Option<String>

Bind address of the admin listener (dashboard + /api/admin/* + /metrics). Defaults to loopback — secure by default (#54/#56): exposing the console is an explicit decision. Container deployments set "0.0.0.0" here (the pod/compose port mapping stays the outer guard). LEAN_CTX_GATEWAY_ADMIN_BIND_HOST overrides. Invalid values fall back to loopback: a typo can only ever narrow exposure, never open it.

usage_retention_days: Option<u32>

Days to keep usage_events rows (enterprise#36). None/0 = keep forever (the local-free default — retention is a deployment decision). A running gateway purges older rows periodically; typical compliance values are 365 or 3650 (EU AI Act evidence horizon).

pseudonymize_persons: Option<bool>

Replace person with a stable keyed pseudonym (p:<hash>) before it reaches metering, budgets, dashboards and logs (enterprise#39, GDPR). The salt lives in <data_dir>/gateway_pii_salt; gateway gdpr re-derives pseudonyms from e-mail input, so DSGVO delete/export keep working. Default false (cleartext person tags).

Implementations

impl GatewayServerConfig

pub fn resolved_admin_bind_host(&self) -> IpAddr

Effective admin bind address (see admin_bind_host). Precedence: LEAN_CTX_GATEWAY_ADMIN_BIND_HOST env > config > 127.0.0.1.

Trait Implementations

impl Clone for GatewayServerConfig

fn clone(&self) -> GatewayServerConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GatewayServerConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GatewayServerConfig

fn default() -> GatewayServerConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for GatewayServerConfig

where GatewayServerConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for GatewayServerConfig

fn eq(&self, other: &GatewayServerConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for GatewayServerConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for GatewayServerConfig