Enum TlsMode 

pub enum TlsMode {
    Off,
    Files {
        cert_path: String,
        key_path: String,
    },
    Acme {
        domains: Vec<String>,
        email: String,
        cache_dir: String,
        staging: bool,
    },
}

Whether, and how, recall-server terminates TLS itself rather than leaving it to an ingress.

The two modes are mutually exclusive and each requires its own pair of variables in full; see ConfigError::PartialTlsFiles, ConfigError::PartialTlsAcme and ConfigError::BothTlsModes.

Variants

Off

Plain HTTP on Config::addr. An ingress is expected to terminate TLS in front of this, per deploy/README.md.

Files

RECALL_TLS_CERT + RECALL_TLS_KEY: serve HTTPS on Config::addr from a certificate and key already on disk, such as one a separate ACME client keeps renewed.

Fields

cert_path: String

PEM certificate chain path (RECALL_TLS_CERT).

key_path: String

PEM private key path (RECALL_TLS_KEY).

Acme

RECALL_TLS_ACME_DOMAINS + RECALL_TLS_ACME_EMAIL: the server gets and renews its own certificate from an ACME directory (Let’s Encrypt, by default) over TLS-ALPN-01, which needs only the one port it is already serving on, port 80 is never touched.

Fields

domains: Vec<String>

The domain names to request a certificate for.

email: String

The contact address the ACME directory may use for expiry notices.

cache_dir: String

Where the issued certificate and account key are cached, so a restart does not re-issue one (RECALL_TLS_ACME_DIR).

staging: bool

Let’s Encrypt’s staging directory instead of production (RECALL_TLS_ACME_STAGING): much higher rate limits while testing, at the cost of a certificate no client will trust.

Implementations

impl TlsMode

pub fn is_enabled(&self) -> bool

Whether the server terminates TLS at all, in either mode.

Trait Implementations

impl Clone for TlsMode

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TlsMode

impl PartialEq for TlsMode

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TlsMode