rust_web_server/entry_point/
mod.rs

1#[cfg(test)]
2mod tests;
3pub mod command_line_args;
4pub mod config_file;
5pub mod environment_variables;
6
7
8use std::{env};
9use crate::virtual_host::VirtualHostConfig;
10
11use crate::entry_point::command_line_args::{override_environment_variables_from_command_line_args};
12use crate::entry_point::config_file::override_environment_variables_from_config;
13use crate::entry_point::environment_variables::read_system_environment_variables;
14
15/// `value` as startup output may show it: secrets (a name with `SECRET`,
16/// `PASSWORD` or `TOKEN`) are replaced.
17pub fn shown<'a>(name: &str, value: &'a str) -> std::borrow::Cow<'a, str> {
18    let upper = name.to_ascii_uppercase();
19    if ["SECRET", "PASSWORD", "TOKEN"].iter().any(|word| upper.contains(word)) && !value.is_empty() {
20        std::borrow::Cow::Borrowed("(hidden)")
21    } else {
22        std::borrow::Cow::Borrowed(value)
23    }
24}
25
26#[derive(PartialEq, Eq, Clone, Debug)]
27pub struct Config {}
28
29impl Config {
30    pub const RWS_CONFIG_IP: &'static str = "RWS_CONFIG_IP";
31    /// Default is `0.0.0.0` so the server is reachable inside containers and K8s pods.
32    /// For local development you can override to `127.0.0.1` via env var or config file.
33    pub const RWS_CONFIG_IP_DEFAULT_VALUE: &'static str = "0.0.0.0";
34
35    /// Log format: `"combined"` (default, Combined Log Format) or `"json"` (structured JSON).
36    pub const RWS_CONFIG_LOG_FORMAT: &'static str = "RWS_CONFIG_LOG_FORMAT";
37    pub const RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE: &'static str = "json";
38
39    pub const RWS_CONFIG_PORT: &'static str = "RWS_CONFIG_PORT";
40    pub const RWS_CONFIG_PORT_DEFAULT_VALUE: &'static str = "7878";
41
42    pub const RWS_CONFIG_THREAD_COUNT: &'static str = "RWS_CONFIG_THREAD_COUNT";
43    pub const RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE: &'static str = "200";
44
45    pub const RWS_CONFIG_CORS_ALLOW_ALL: &'static str = "RWS_CONFIG_CORS_ALLOW_ALL";
46    pub const RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE: &'static str = "false";
47
48    pub const RWS_CONFIG_CORS_ALLOW_ORIGINS: &'static str = "RWS_CONFIG_CORS_ALLOW_ORIGINS";
49    pub const RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE: &'static str = "";
50
51    pub const RWS_CONFIG_CORS_ALLOW_CREDENTIALS: &'static str = "RWS_CONFIG_CORS_ALLOW_CREDENTIALS";
52    pub const RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE: &'static str = "";
53
54    pub const RWS_CONFIG_CORS_ALLOW_HEADERS: &'static str = "RWS_CONFIG_CORS_ALLOW_HEADERS";
55    pub const RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE: &'static str = "";
56
57    pub const RWS_CONFIG_CORS_ALLOW_METHODS: &'static str = "RWS_CONFIG_CORS_ALLOW_METHODS";
58    pub const RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE: &'static str = "";
59
60    pub const RWS_CONFIG_CORS_EXPOSE_HEADERS: &'static str = "RWS_CONFIG_CORS_EXPOSE_HEADERS";
61    pub const RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE: &'static str = "";
62
63    pub const RWS_CONFIG_CORS_MAX_AGE: &'static str = "RWS_CONFIG_CORS_MAX_AGE";
64    pub const RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE: &'static str = "86400";
65
66    pub const RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES: &'static str = "RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES";
67    pub const RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE: &'static str = "10000";
68
69    /// Maximum accepted request body size in bytes, checked against `Content-Length`
70    /// before any body bytes are read off the socket. `0` (the default) means
71    /// unlimited — this is opt-in, not a default-on behavior change. Requests whose
72    /// declared body exceeds this get `413 Payload Too Large` and the connection is
73    /// closed (not kept alive), since bytes the server chose not to read are still
74    /// queued on the client's side of the socket.
75    pub const RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES: &'static str = "RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES";
76    pub const RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES_DEFAULT_VALUE: &'static str = "0";
77
78    /// Serve this file (e.g. `"index.html"`) for a `GET`/`HEAD` request that doesn't
79    /// match any real file/directory, instead of `404` — the standard client-side-router
80    /// ("SPA") fallback pattern needed for deep links in a React Router / Vue Router /
81    /// etc. app. Empty (default) disables it entirely. See
82    /// `crate::app::controller::static_resource` for the matching heuristic (skips
83    /// paths that look like a missed static asset, i.e. the last segment has a `.`).
84    pub const RWS_CONFIG_SPA_FALLBACK: &'static str = "RWS_CONFIG_SPA_FALLBACK";
85    pub const RWS_CONFIG_SPA_FALLBACK_DEFAULT_VALUE: &'static str = "";
86
87    /// Comma-separated path prefixes (e.g. `"/api,/healthz"`) that never receive the
88    /// SPA fallback even when `RWS_CONFIG_SPA_FALLBACK` is set — so a real API `404`
89    /// isn't silently rewritten into a `200`. Empty (default) excludes nothing.
90    pub const RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES: &'static str = "RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES";
91    pub const RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES_DEFAULT_VALUE: &'static str = "";
92
93    pub const RWS_CONFIG_TLS_CERT_FILE: &'static str = "RWS_CONFIG_TLS_CERT_FILE";
94    pub const RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE: &'static str = "";
95
96    pub const RWS_CONFIG_TLS_KEY_FILE: &'static str = "RWS_CONFIG_TLS_KEY_FILE";
97    pub const RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE: &'static str = "";
98
99    /// Path to a PEM-encoded CA certificate used to verify client certificates (mTLS).
100    /// When set, the TLS handshake requires a valid client certificate signed by this CA.
101    /// Connections without a valid cert are rejected at the TLS layer (before any HTTP processing).
102    pub const RWS_CONFIG_TLS_CLIENT_CA_FILE: &'static str = "RWS_CONFIG_TLS_CLIENT_CA_FILE";
103    pub const RWS_CONFIG_TLS_CLIENT_CA_FILE_DEFAULT_VALUE: &'static str = "";
104
105    /// Directory containing Tera HTML templates (default: `"templates"`). Requires `tera` feature.
106    pub const RWS_CONFIG_TEMPLATE_DIR: &'static str = "RWS_CONFIG_TEMPLATE_DIR";
107    pub const RWS_CONFIG_TEMPLATE_DIR_DEFAULT_VALUE: &'static str = "templates";
108
109    /// When non-empty, a plain-HTTP listener on this port redirects all requests to HTTPS.
110    /// Set to e.g. `"80"` when running on standard ports. Requires TLS to be configured.
111    pub const RWS_CONFIG_HTTP_REDIRECT_PORT: &'static str = "RWS_CONFIG_HTTP_REDIRECT_PORT";
112    pub const RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE: &'static str = "";
113
114    // ── ACME (Automatic Certificate Management Environment) ───────────────────
115
116    /// Comma-separated list of domain names to obtain a certificate for.
117    /// Setting this activates ACME at startup. Example: `"example.com,www.example.com"`
118    pub const RWS_CONFIG_ACME_DOMAINS: &'static str = "RWS_CONFIG_ACME_DOMAINS";
119    pub const RWS_CONFIG_ACME_DOMAINS_DEFAULT_VALUE: &'static str = "";
120
121    /// Contact email sent to the CA. Recommended but not required.
122    pub const RWS_CONFIG_ACME_EMAIL: &'static str = "RWS_CONFIG_ACME_EMAIL";
123    pub const RWS_CONFIG_ACME_EMAIL_DEFAULT_VALUE: &'static str = "";
124
125    /// Set to `"true"` to use the Let's Encrypt staging environment (for testing).
126    pub const RWS_CONFIG_ACME_STAGING: &'static str = "RWS_CONFIG_ACME_STAGING";
127    pub const RWS_CONFIG_ACME_STAGING_DEFAULT_VALUE: &'static str = "false";
128
129    /// Custom ACME directory URL. Defaults to Let's Encrypt production.
130    pub const RWS_CONFIG_ACME_DIRECTORY: &'static str = "RWS_CONFIG_ACME_DIRECTORY";
131    pub const RWS_CONFIG_ACME_DIRECTORY_DEFAULT_VALUE: &'static str = "";
132
133    /// Where to write the provisioned certificate chain (PEM). Defaults to `RWS_CONFIG_TLS_CERT_FILE`,
134    /// or `cert.pem` in the working directory when that is empty too.
135    pub const RWS_CONFIG_ACME_CERT_PATH: &'static str = "RWS_CONFIG_ACME_CERT_PATH";
136    pub const RWS_CONFIG_ACME_CERT_PATH_DEFAULT_VALUE: &'static str = "";
137
138    /// Where to write the certificate's private key (PEM). Defaults to `RWS_CONFIG_TLS_KEY_FILE`,
139    /// or `key.pem` in the working directory when that is empty too.
140    pub const RWS_CONFIG_ACME_KEY_PATH: &'static str = "RWS_CONFIG_ACME_KEY_PATH";
141    pub const RWS_CONFIG_ACME_KEY_PATH_DEFAULT_VALUE: &'static str = "";
142
143    /// Port for the temporary HTTP-01 challenge server (default 80).
144    /// Must be reachable from the internet on port 80. Not used with DNS-01.
145    pub const RWS_CONFIG_ACME_CHALLENGE_PORT: &'static str = "RWS_CONFIG_ACME_CHALLENGE_PORT";
146    pub const RWS_CONFIG_ACME_CHALLENGE_PORT_DEFAULT_VALUE: &'static str = "80";
147
148    /// Renew when fewer than this many days remain on the certificate (default 30).
149    pub const RWS_CONFIG_ACME_RENEW_BEFORE_DAYS: &'static str = "RWS_CONFIG_ACME_RENEW_BEFORE_DAYS";
150    /// Empty: renew at two-thirds of the certificate's lifetime (or the CA's
151    /// renewal window), not a fixed number of days before expiry.
152    pub const RWS_CONFIG_ACME_RENEW_BEFORE_DAYS_DEFAULT_VALUE: &'static str = "";
153    pub const RWS_CONFIG_ACME_PROFILE: &'static str = "RWS_CONFIG_ACME_PROFILE";
154
155    /// Path to persist the ACME account key between restarts (default `acme_account.key`).
156    pub const RWS_CONFIG_ACME_ACCOUNT_KEY_PATH: &'static str = "RWS_CONFIG_ACME_ACCOUNT_KEY_PATH";
157    pub const RWS_CONFIG_ACME_ACCOUNT_KEY_PATH_DEFAULT_VALUE: &'static str = "acme_account.key";
158
159    /// PEM file of extra root CAs to trust when talking to the ACME directory,
160    /// on top of the public Web PKI roots — for a private ACME CA (step-ca,
161    /// Pebble, an internal Boulder). Empty means public roots only.
162    pub const RWS_CONFIG_ACME_CA_FILE: &'static str = "RWS_CONFIG_ACME_CA_FILE";
163    pub const RWS_CONFIG_ACME_CA_FILE_DEFAULT_VALUE: &'static str = "";
164
165    /// Seconds between certificate-expiry checks in the renewal loop (default 12h).
166    /// After a failed renewal the next attempt comes after at most one hour.
167    pub const RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS: &'static str = "RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS";
168    pub const RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS_DEFAULT_VALUE: &'static str = "43200";
169
170    /// How to prove control of the domains: `http-01` (default),
171    /// `tls-alpn-01` (on the HTTPS port) or `dns-01` (needed for wildcards).
172    pub const RWS_CONFIG_ACME_CHALLENGE: &'static str = "RWS_CONFIG_ACME_CHALLENGE";
173    /// DNS-01: `rfc2136` (a DNS UPDATE to `RWS_CONFIG_ACME_DNS_SERVER`) or
174    /// `exec` (a program that adds and removes the record).
175    pub const RWS_CONFIG_ACME_DNS_PROVIDER: &'static str = "RWS_CONFIG_ACME_DNS_PROVIDER";
176    /// DNS-01 `rfc2136`: the primary server, `host[:port]` (port 53).
177    pub const RWS_CONFIG_ACME_DNS_SERVER: &'static str = "RWS_CONFIG_ACME_DNS_SERVER";
178    /// DNS-01: the zone holding the records; found by SOA lookup when empty.
179    pub const RWS_CONFIG_ACME_DNS_ZONE: &'static str = "RWS_CONFIG_ACME_DNS_ZONE";
180    /// DNS-01 `rfc2136`: the TSIG key name the server knows.
181    pub const RWS_CONFIG_ACME_DNS_TSIG_KEY: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_KEY";
182    /// DNS-01 `rfc2136`: the TSIG secret, base64 — never printed.
183    pub const RWS_CONFIG_ACME_DNS_TSIG_SECRET: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_SECRET";
184    /// DNS-01 `rfc2136`: `hmac-sha256` (default) or `hmac-sha512`.
185    pub const RWS_CONFIG_ACME_DNS_TSIG_ALGORITHM: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_ALGORITHM";
186    /// DNS-01 `exec`: the program run as `<program> present|cleanup <fqdn> <value>`.
187    pub const RWS_CONFIG_ACME_DNS_EXEC: &'static str = "RWS_CONFIG_ACME_DNS_EXEC";
188    /// DNS-01: how long to wait for the record to be visible (default 120).
189    pub const RWS_CONFIG_ACME_DNS_PROPAGATION_SECS: &'static str = "RWS_CONFIG_ACME_DNS_PROPAGATION_SECS";
190    /// DNS-01 cloudflare: the API token (DNS edit) — never printed.
191    pub const RWS_CONFIG_ACME_DNS_API_TOKEN: &'static str = "RWS_CONFIG_ACME_DNS_API_TOKEN";
192    /// DNS-01 cloudflare / route53: the API base URL instead of the
193    /// provider's own (a proxy, a test double).
194    pub const RWS_CONFIG_ACME_DNS_API_URL: &'static str = "RWS_CONFIG_ACME_DNS_API_URL";
195    /// DNS-01 cloudflare / route53: the zone's id, instead of looking it up.
196    pub const RWS_CONFIG_ACME_DNS_ZONE_ID: &'static str = "RWS_CONFIG_ACME_DNS_ZONE_ID";
197    /// Redis (`host:port`) shared by replicas: one orders, all install.
198    pub const RWS_CONFIG_ACME_REDIS: &'static str = "RWS_CONFIG_ACME_REDIS";
199    /// Password for `RWS_CONFIG_ACME_REDIS` — never printed.
200    pub const RWS_CONFIG_ACME_REDIS_PASSWORD: &'static str = "RWS_CONFIG_ACME_REDIS_PASSWORD";
201    /// Key prefix in that Redis (default `rws:acme`).
202    pub const RWS_CONFIG_ACME_REDIS_PREFIX: &'static str = "RWS_CONFIG_ACME_REDIS_PREFIX";
203    /// `true`: order a certificate at the first TLS handshake for a name
204    /// `RWS_CONFIG_ACME_ON_DEMAND_ASK` allows (since 18.4.0).
205    pub const RWS_CONFIG_ACME_ON_DEMAND: &'static str = "RWS_CONFIG_ACME_ON_DEMAND";
206    /// On-demand TLS: URL asked `?domain=<name>` before each order; 2xx allows it.
207    pub const RWS_CONFIG_ACME_ON_DEMAND_ASK: &'static str = "RWS_CONFIG_ACME_ON_DEMAND_ASK";
208    /// `[admin] listen`: `host:port` of the admin API (since 18.10.0); unset = off.
209    pub const RWS_CONFIG_ADMIN_LISTEN: &'static str = "RWS_CONFIG_ADMIN_LISTEN";
210    /// `[admin] token_env`: the environment variable holding the admin bearer
211    /// token (default `RWS_ADMIN_TOKEN`).
212    pub const RWS_CONFIG_ADMIN_TOKEN_ENV: &'static str = "RWS_CONFIG_ADMIN_TOKEN_ENV";
213    /// `[admin] allowed_origins`: browser origins allowed besides the admin
214    /// listener's own (comma list).
215    pub const RWS_CONFIG_ADMIN_ALLOWED_ORIGINS: &'static str = "RWS_CONFIG_ADMIN_ALLOWED_ORIGINS";
216
217
218    pub const RWS_DEFAULT_IP: &'static str = "127.0.0.1";
219    pub const RWS_DEFAULT_PORT: &'static i32 = &7878;
220    pub const RWS_DEFAULT_THREAD_COUNT: &'static i32 = &200;
221    pub const RWS_DEFAULT_REQUEST_ALLOCATION_SIZE_IN_BYTES: &'static i64 = &10000;
222
223
224}
225
226pub fn bootstrap() {
227    read_system_environment_variables();
228    override_environment_variables_from_config(None);
229    override_environment_variables_from_command_line_args();
230    crate::server_config::invalidate();
231}
232
233pub fn set_default_values() {
234    println!("  Initializing default values");
235
236    let is_var_set = env::var(Config::RWS_CONFIG_IP).is_ok();
237    if !is_var_set {
238        env::set_var(Config::RWS_CONFIG_IP, Config::RWS_CONFIG_IP_DEFAULT_VALUE);
239        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_IP, Config::RWS_CONFIG_IP_DEFAULT_VALUE);
240    } else {
241        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_IP);
242    }
243
244
245    let is_var_set = env::var(Config::RWS_CONFIG_PORT).is_ok();
246    if !is_var_set {
247        env::set_var(Config::RWS_CONFIG_PORT, Config::RWS_CONFIG_PORT_DEFAULT_VALUE);
248        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_PORT, Config::RWS_CONFIG_PORT_DEFAULT_VALUE);
249    } else {
250        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_PORT);
251    }
252
253    let is_var_set = env::var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES).is_ok();
254    if !is_var_set {
255        env::set_var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE);
256        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE);
257    } else {
258        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
259    }
260
261
262    let is_var_set = env::var(Config::RWS_CONFIG_THREAD_COUNT).is_ok();
263    if !is_var_set {
264        env::set_var(Config::RWS_CONFIG_THREAD_COUNT, Config::RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE);
265        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_THREAD_COUNT, Config::RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE);
266    } else {
267        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_THREAD_COUNT);
268    }
269
270    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_ALL).is_ok();
271    if !is_var_set {
272        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_ALL, Config::RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE);
273        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_ALL, Config::RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE);
274    } else {
275        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_ALL);
276    }
277
278
279    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_ORIGINS).is_ok();
280    if !is_var_set {
281        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_ORIGINS, Config::RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE);
282        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_ORIGINS, Config::RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE);
283    } else {
284        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_ORIGINS);
285    }
286
287    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS).is_ok();
288    if !is_var_set {
289        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS, Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE);
290        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS, Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE);
291    } else {
292        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS);
293    }
294
295    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_HEADERS).is_ok();
296    if !is_var_set {
297        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_HEADERS, Config::RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE);
298        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_HEADERS, Config::RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE);
299    } else {
300        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_HEADERS);
301    }
302
303
304    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_METHODS).is_ok();
305    if !is_var_set {
306        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_METHODS, Config::RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE);
307        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_METHODS, Config::RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE);
308    } else {
309        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_METHODS);
310    }
311
312    let is_var_set = env::var(Config::RWS_CONFIG_CORS_EXPOSE_HEADERS).is_ok();
313    if !is_var_set {
314        env::set_var(Config::RWS_CONFIG_CORS_EXPOSE_HEADERS, Config::RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE);
315        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_EXPOSE_HEADERS, Config::RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE);
316    } else {
317        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_EXPOSE_HEADERS);
318    }
319
320    let is_var_set = env::var(Config::RWS_CONFIG_CORS_MAX_AGE).is_ok();
321    if !is_var_set {
322        env::set_var(Config::RWS_CONFIG_CORS_MAX_AGE, Config::RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE);
323        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_MAX_AGE, Config::RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE);
324    } else {
325        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_MAX_AGE);
326    }
327
328
329    let is_var_set = env::var(Config::RWS_CONFIG_TLS_CERT_FILE).is_ok();
330    if !is_var_set {
331        env::set_var(Config::RWS_CONFIG_TLS_CERT_FILE, Config::RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE);
332        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_TLS_CERT_FILE, Config::RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE);
333    } else {
334        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_TLS_CERT_FILE);
335    }
336
337    let is_var_set = env::var(Config::RWS_CONFIG_TLS_KEY_FILE).is_ok();
338    if !is_var_set {
339        env::set_var(Config::RWS_CONFIG_TLS_KEY_FILE, Config::RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE);
340        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_TLS_KEY_FILE, Config::RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE);
341    } else {
342        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_TLS_KEY_FILE);
343    }
344
345    let is_var_set = env::var(Config::RWS_CONFIG_HTTP_REDIRECT_PORT).is_ok();
346    if !is_var_set {
347        env::set_var(Config::RWS_CONFIG_HTTP_REDIRECT_PORT, Config::RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE);
348        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_HTTP_REDIRECT_PORT, Config::RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE);
349    } else {
350        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_HTTP_REDIRECT_PORT);
351    }
352
353    let is_var_set = env::var(Config::RWS_CONFIG_LOG_FORMAT).is_ok();
354    if !is_var_set {
355        env::set_var(Config::RWS_CONFIG_LOG_FORMAT, Config::RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE);
356        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_LOG_FORMAT, Config::RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE);
357    } else {
358        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_LOG_FORMAT);
359    }
360
361    crate::server_config::invalidate();
362    println!("  End of initializing default values\n");
363}
364
365
366pub fn get_ip_port_thread_count() -> (String, i32, i32) {
367    let mut ip : String = Config::RWS_CONFIG_IP_DEFAULT_VALUE.to_string();
368    let mut port: i32 = *Config::RWS_DEFAULT_PORT;
369    let mut thread_count: i32 = *Config::RWS_DEFAULT_THREAD_COUNT;
370
371    let boxed_ip = env::var(Config::RWS_CONFIG_IP);
372    if boxed_ip.is_ok() {
373        ip = boxed_ip.unwrap()
374    }
375
376    let boxed_port = env::var(Config::RWS_CONFIG_PORT);
377    if boxed_port.is_ok() {
378        let _port = boxed_port.unwrap();
379        let boxed_parse = _port.parse::<i32>();
380        if boxed_parse.is_ok() {
381            port = boxed_parse.unwrap();
382        } else {
383            eprintln!("unable to parse port value, expected number, got {}, variable: {}",
384                      _port, Config::RWS_CONFIG_PORT);
385        }
386    } else {
387        eprintln!("unable to parse port value, variable: {}", Config::RWS_CONFIG_PORT);
388    }
389
390    let boxed_thread_count = env::var(Config::RWS_CONFIG_THREAD_COUNT);
391    if boxed_thread_count.is_ok() {
392        let _thread_count = boxed_thread_count.unwrap();
393        let boxed_parse = _thread_count.parse();
394        if boxed_parse.is_ok() {
395            thread_count = boxed_parse.unwrap()
396        } else {
397            eprintln!("unable to parse thread count value, expected number, got {}, variable: {}",
398                      thread_count, Config::RWS_CONFIG_THREAD_COUNT);
399        }
400
401    } else {
402        eprintln!("unable to parse thread count value, variable: {}", Config::RWS_CONFIG_THREAD_COUNT);
403    }
404
405    (ip, port, thread_count)
406}
407
408/// Read all `[[virtual_host]]` entries from config / env vars.
409///
410/// Each entry must have `RWS_CONFIG_VIRTUAL_HOST_{N}_DOMAIN` set; reading
411/// stops at the first missing index.  `cert_file` and `key_file` default to
412/// empty string if omitted.
413pub fn get_virtual_hosts() -> Vec<VirtualHostConfig> {
414    let mut hosts = Vec::new();
415    let mut i = 0usize;
416    loop {
417        match env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_DOMAIN", i)) {
418            Err(_) => break,
419            Ok(domain) => {
420                let cert_file = env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_CERT_FILE", i))
421                    .unwrap_or_default();
422                let key_file = env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_KEY_FILE", i))
423                    .unwrap_or_default();
424                hosts.push(VirtualHostConfig { domain, cert_file, key_file });
425                i += 1;
426            }
427        }
428    }
429    hosts
430}
431
432pub fn get_request_allocation_size() -> i64 {
433    let mut request_allocation_size: i64 = *Config::RWS_DEFAULT_REQUEST_ALLOCATION_SIZE_IN_BYTES;
434
435    let boxed_port = env::var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
436    if boxed_port.is_ok() {
437        let _request_allocation_size = boxed_port.unwrap();
438        let boxed_parse = _request_allocation_size.parse::<i64>();
439        if boxed_parse.is_ok() {
440            request_allocation_size = boxed_parse.unwrap();
441        } else {
442            eprintln!("unable to parse port value, expected number, got {}, variable: {}",
443                      _request_allocation_size, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
444        }
445    } else {
446        eprintln!("unable to parse request allocation size value, variable: {}", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
447    }
448
449
450    request_allocation_size
451}
452
453/// Maximum accepted request body size in bytes. `0` means unlimited (the default —
454/// enforcing a cap is opt-in). Read fresh on every call, so `RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES`
455/// takes effect immediately, the same as [`get_request_allocation_size`].
456pub fn get_max_body_size() -> u64 {
457    env::var(Config::RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES)
458        .ok()
459        .and_then(|v| v.parse::<u64>().ok())
460        .unwrap_or(0)
461}
462
463/// The configured SPA-fallback file (e.g. `"index.html"`), or `None` if
464/// `RWS_CONFIG_SPA_FALLBACK` is unset/empty (the default — disabled). Read
465/// fresh on every call, so it can be toggled via `rws.config.toml` + `SIGHUP`
466/// without a restart, the same as [`get_max_body_size`].
467pub fn get_spa_fallback() -> Option<String> {
468    env::var(Config::RWS_CONFIG_SPA_FALLBACK).ok().filter(|v| !v.is_empty())
469}
470
471/// Path prefixes that never receive the SPA fallback (`RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES`,
472/// comma-separated), even when the fallback is configured. Empty (default) excludes nothing.
473pub fn get_spa_fallback_exclude_prefixes() -> Vec<String> {
474    env::var(Config::RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES)
475        .ok()
476        .map(|v| v.split(',').map(|s| s.trim().to_string()).filter(|s| !s.is_empty()).collect())
477        .unwrap_or_default()
478}
479
rust_web_server/entry_point/mod.rs

rust_web_server/entry_point/
mod.rs
