Struct Config 

pub struct Config {

    pub data_dir: PathBuf,
    pub rest_addr: SocketAddr,
    pub grpc_addr: SocketAddr,
    pub api_keys: Vec<ApiKey>,
    pub encryption_key: Option<String>,
    pub master_key_file: Option<PathBuf>,
    pub tls_cert: Option<PathBuf>,
    pub tls_key: Option<PathBuf>,
    pub tls_client_ca: Option<PathBuf>,
    pub audit_log: Option<PathBuf>,
    pub leader_url: Option<String>,
    pub leader_api_key: Option<String>,
    pub insecure: bool,
    pub limits: Limits,
    pub embedding: HashMap<String, EmbeddingConfig>,
    pub rerank: HashMap<String, RerankConfig>,
    pub rate_limit: RateLimitConfig,
    pub otlp: OtlpConfig,
    pub mvcc_reads: bool,
}

Server configuration, layered defaults → quiver.toml → QUIVER_* env and validated at startup (ADR-0013).

Fields

data_dir: PathBuf

Data directory for the storage engine.

rest_addr: SocketAddr

REST (HTTP/1.1) bind address.

grpc_addr: SocketAddr

gRPC (HTTP/2) bind address.

api_keys: Vec<ApiKey>

Accepted API keys with their RBAC scopes (ADR-0011). A bare secret — from a comma-separated QUIVER_API_KEYS (the env form) or a plain TOML array entry — is an all-collections admin key; a structured {secret, role, collections} entry pins a narrower scope. Empty is allowed only with insecure = true.

encryption_key: Option<String>

Hex-encoded 256-bit master key for encryption-at-rest (64 hex characters). It wraps per-collection data-encryption keys (ADR-0010). Required unless insecure = true or master_key_file is set; source it from the environment or a secret store, never the committed config. None ⇒ data is stored unencrypted (only valid in insecure mode).

master_key_file: Option<PathBuf>

Path to a file holding the hex master key, as an alternative to encryption_key (set exactly one). Lets the key arrive as a mounted secret (Docker/Kubernetes) or a KMS-decrypted file rather than an environment variable. It should be mode 0600; a group/world-accessible file is warned about at startup.

tls_cert: Option<PathBuf>

Path to the PEM-encoded TLS certificate chain. Must be set together with tls_key. Required for a non-loopback bind unless insecure = true.

tls_key: Option<PathBuf>

Path to the PEM-encoded TLS private key. Must be set together with tls_cert.

tls_client_ca: Option<PathBuf>

Path to a PEM-encoded CA certificate that signs accepted client certificates. When set, both transports require mutual TLS: a client must present a certificate chaining to this CA to connect (ADR-0011). Requires tls_cert/tls_key; bearer API keys still carry the RBAC scope.

audit_log: Option<PathBuf>

Path to an append-only audit log file (ADR-0011). When set, every mutating and administrative operation and every access-control denial is appended as one JSON object per line (JSON Lines); records are always also emitted as tracing events. Unset ⇒ tracing only. Secrets are never written — see docs/security/audit.md.

leader_url: Option<String>

Run as a read-replica follower (ADR-0030): connect to a leader’s gRPC endpoint at this URL (e.g. http://leader:6334) and continuously apply its committed operations, serving reads. A follower refuses writes. Unset ⇒ this node is a normal read-write leader. (Plaintext http:// for now; TLS to the leader is a follow-up — run replication over a trusted network.)

leader_api_key: Option<String>

API key the follower presents to the leader’s admin-scoped Replicate stream (used with leader_url). Source it like any secret.

insecure: bool

Opt out of the secure defaults (no auth, no encryption-at-rest, allow a non-loopback bind without TLS). For local development only; never the default.

limits: Limits

Per-request cost limits (ADR-0040). Set with a [limits] table in quiver.toml or the QUIVER_MAX_* environment variables.

embedding: HashMap<String, EmbeddingConfig>

Opt-in server-side embedding providers, keyed by collection name (ADR-0047). Configured with [embedding.<collection>] tables in quiver.toml; default empty, so the engine stays model-agnostic and library mode is unaffected. API keys are referenced by env-var name and resolved at startup, never stored. Enables search_text / upsert_text for the named collections.

rerank: HashMap<String, RerankConfig>

Opt-in server-side rerank providers, keyed by collection name (ADR-0047). Configured with [rerank.<collection>] tables; enables the one-call retrieve→rerank stage of search_text.

rate_limit: RateLimitConfig

Opt-in per-key rate limiting (ADR-0049). Set a [rate_limit] table in quiver.toml or the QUIVER_RATE_LIMIT_* env vars; requests_per_second = 0 (the default) disables it.

otlp: OtlpConfig

Opt-in OpenTelemetry traces export (ADR-0059). Set an [otlp] table or the QUIVER_OTLP_* env vars; an empty endpoint (the default) disables it. Export additionally requires the server’s otlp build feature.

mvcc_reads: bool

Lock-free MVCC reads (ADR-0064), experimental and default-off. Serves reads of single-vector, in-memory collections from an arc-swap snapshot so pure-vector reads never block on a concurrent writer. Also settable via QUIVER_MVCC_READS. See docs/adr/0064-mvcc-reads-implementation.md.

Implementations

impl Config

pub fn load() -> Result<Self, Error>

Load configuration from defaults, an optional quiver.toml, and QUIVER_* environment variables.

pub fn validate(&self) -> Result<(), Error>

Reject insecure configurations unless explicitly opted out (ADR-0013): no anonymous access, encryption-at-rest on by default with a valid key, and no non-loopback bind without TLS.

Trait Implementations

impl Clone for Config

fn clone(&self) -> Config

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Config

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Config

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for Config

where Config: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Config

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.