Struct ValkeyConfig 

pub struct ValkeyConfig {
    pub endpoint: String,
    pub tls: bool,
    pub username: Option<String>,
    pub password: Option<String>,
    pub key_prefix: String,
    pub ttl_seconds: Option<u64>,
    pub max_session_lifetime_seconds: Option<u64>,
    pub connect_timeout_ms: u64,
    pub command_timeout_ms: u64,
}

Parsed global.apl.session_store config for kind: valkey.

Unknown keys (including kind, consumed by the factory dispatch) are ignored so the same block can carry the discriminator.

Fields

endpoint: String

Endpoint: a redis:// / rediss:// URL or a bare host:port.

tls: bool

Whether to use TLS. Implied true for a rediss:// endpoint. Required for any non-localhost endpoint (validated).

username: Option<String>

Optional ACL username (Valkey 6+ ACLs). Paired with password.

password: Option<String>

Optional auth password / ACL secret. Sourced from config/env by the operator; never hard-coded.

key_prefix: String

Key prefix/namespace for label keys.

ttl_seconds: Option<u64>

Sliding TTL in seconds, refreshed on load and append. None (default) means no expiry.

max_session_lifetime_seconds: Option<u64>

Declared maximum session-identity lifetime, used only to emit the TTL-soundness warning when ttl_seconds is shorter.

connect_timeout_ms: u64

Connection acquisition timeout (ms).

command_timeout_ms: u64

Per-command response timeout (ms) — the fail-closed hot-path knob.

Implementations

impl ValkeyConfig

pub fn from_value(value: &Value) -> Result<ValkeyConfig, BuildError>

Parse from the YAML config block, then validate.

Errors

Returns BuildError when the block does not deserialize, or when validation rejects it: a non-localhost endpoint without TLS, contradictory credentials, or a TTL too large to express as an expiry.

pub fn tls_enabled(&self) -> bool

TLS is on when explicitly set or implied by a rediss:// scheme.

pub fn connection_url(&self) -> Result<String, BuildError>

Build the redis/rediss connection URL deadpool consumes.

Credentials are percent-encoded via the url crate (never naive string interpolation), and the wire scheme always reflects Self::tls_enabled so it cannot disagree with the validated TLS intent. A fully-formed endpoint URL is parsed (and trusted for its own embedded credentials); a bare host:port is assembled with the configured scheme and any separate username/password.

Errors

Returns BuildError::Config when the endpoint is not a valid URL or cannot carry the configured credentials. The endpoint is redacted in the message, so a password in the URL is never disclosed.

Trait Implementations

impl Clone for ValkeyConfig

fn clone(&self) -> ValkeyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ValkeyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ValkeyConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<ValkeyConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.