Enum ConfigError 

pub enum ConfigError {
    MissingToken,
    PartialTlsFiles,
    PartialTlsAcme,
    BothTlsModes,
    TrustedIpHeaderWithTls,
    TlsRequired,
    NoAcmeDomains,
    WildcardAcmeDomain(String),
    InvalidFlag {
        var: &'static str,
        value: String,
    },
}

Why the server cannot start.

Variants

MissingToken

Mirrors the Node server’s refusal to start without auth — a server reachable from the internet with no token is not a degraded mode worth supporting.

PartialTlsFiles

RECALL_TLS_CERT and RECALL_TLS_KEY name one file each; half a pair is almost always a typo in one of the two variable names.

PartialTlsAcme

RECALL_TLS_ACME_DOMAINS and RECALL_TLS_ACME_EMAIL are the same kind of pair, for the same reason.

BothTlsModes

The two TLS modes are mutually exclusive: each picks its own certificate source, and a config with both is ambiguous about which one wins rather than a config this server can just run.

TrustedIpHeaderWithTls

With direct TLS there is no ingress, so the socket’s own peer address is the only client IP that is not the client’s own choice. Setting this variable anyway is either a no-op or, if it is ever read, a way for a client to buy itself an unlimited number of token guesses by rotating whatever header it names, so refusing to start beats silently ignoring the setting.

An explicitly empty value is the one exception: it means “trust no header”, which is exactly what TLS forces anyway, so deploy/docker-compose.direct.yml sets it that way as a second guard, in case its TLS variables ever go missing and the server comes up as plain HTTP instead.

TlsRequired

RECALL_TLS_REQUIRED is set, but neither TLS mode is configured. A deployment that publishes its port straight to the internet (deploy/docker-compose.direct.yml) must never come up as plain HTTP just because its certificate variables went missing or empty: that would put the bearer token on the wire in clear text.

NoAcmeDomains

RECALL_TLS_ACME_DOMAINS was set but named no domain at all (only commas or whitespace). There is nothing to ask a certificate for, and a server with no certificate fails every handshake.

WildcardAcmeDomain(String)

TLS-ALPN-01, the only challenge this server answers, cannot prove control of a wildcard name (Let’s Encrypt requires DNS-01 for those), so an order for one could only ever fail, over and over, on the ACME directory’s rate limit.

InvalidFlag

A yes/no setting whose value is neither. Unlike the numeric tunables, which fall back to a default on a typo, these two decide whether the server may run without TLS and which certificate authority it trusts, so guessing either way would be wrong somewhere.

Fields

var: &'static str

The variable’s name.

value: String

What it was set to.

Trait Implementations

impl Clone for ConfigError

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ConfigError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for ConfigError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for ConfigError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.