rust_web_server/entry_point/
mod.rs

1#[cfg(test)]
2mod tests;
3pub mod command_line_args;
4pub mod config_file;
5pub mod environment_variables;
6
7
8use std::{env};
9use crate::virtual_host::VirtualHostConfig;
10
11use crate::entry_point::command_line_args::{override_environment_variables_from_command_line_args};
12use crate::entry_point::config_file::override_environment_variables_from_config;
13use crate::entry_point::environment_variables::read_system_environment_variables;
14
15/// `value` as startup output may show it: secrets (a name with `SECRET`,
16/// `PASSWORD` or `TOKEN`) are replaced.
17pub fn shown<'a>(name: &str, value: &'a str) -> std::borrow::Cow<'a, str> {
18    let upper = name.to_ascii_uppercase();
19    if ["SECRET", "PASSWORD", "TOKEN"].iter().any(|word| upper.contains(word)) && !value.is_empty() {
20        std::borrow::Cow::Borrowed("(hidden)")
21    } else {
22        std::borrow::Cow::Borrowed(value)
23    }
24}
25
26#[derive(PartialEq, Eq, Clone, Debug)]
27pub struct Config {}
28
29impl Config {
30    pub const RWS_CONFIG_IP: &'static str = "RWS_CONFIG_IP";
31    /// Default is `0.0.0.0` so the server is reachable inside containers and K8s pods.
32    /// For local development you can override to `127.0.0.1` via env var or config file.
33    pub const RWS_CONFIG_IP_DEFAULT_VALUE: &'static str = "0.0.0.0";
34
35    /// Log format: `"combined"` (default, Combined Log Format) or `"json"` (structured JSON).
36    pub const RWS_CONFIG_LOG_FORMAT: &'static str = "RWS_CONFIG_LOG_FORMAT";
37    pub const RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE: &'static str = "json";
38
39    pub const RWS_CONFIG_PORT: &'static str = "RWS_CONFIG_PORT";
40    pub const RWS_CONFIG_PORT_DEFAULT_VALUE: &'static str = "7878";
41
42    pub const RWS_CONFIG_THREAD_COUNT: &'static str = "RWS_CONFIG_THREAD_COUNT";
43    pub const RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE: &'static str = "200";
44
45    pub const RWS_CONFIG_CORS_ALLOW_ALL: &'static str = "RWS_CONFIG_CORS_ALLOW_ALL";
46    pub const RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE: &'static str = "false";
47
48    pub const RWS_CONFIG_CORS_ALLOW_ORIGINS: &'static str = "RWS_CONFIG_CORS_ALLOW_ORIGINS";
49    pub const RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE: &'static str = "";
50
51    pub const RWS_CONFIG_CORS_ALLOW_CREDENTIALS: &'static str = "RWS_CONFIG_CORS_ALLOW_CREDENTIALS";
52    pub const RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE: &'static str = "";
53
54    pub const RWS_CONFIG_CORS_ALLOW_HEADERS: &'static str = "RWS_CONFIG_CORS_ALLOW_HEADERS";
55    pub const RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE: &'static str = "";
56
57    pub const RWS_CONFIG_CORS_ALLOW_METHODS: &'static str = "RWS_CONFIG_CORS_ALLOW_METHODS";
58    pub const RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE: &'static str = "";
59
60    pub const RWS_CONFIG_CORS_EXPOSE_HEADERS: &'static str = "RWS_CONFIG_CORS_EXPOSE_HEADERS";
61    pub const RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE: &'static str = "";
62
63    pub const RWS_CONFIG_CORS_MAX_AGE: &'static str = "RWS_CONFIG_CORS_MAX_AGE";
64    pub const RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE: &'static str = "86400";
65
66    pub const RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES: &'static str = "RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES";
67    pub const RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE: &'static str = "10000";
68
69    /// Maximum accepted request body size in bytes, checked against `Content-Length`
70    /// before any body bytes are read off the socket. `0` (the default) means
71    /// unlimited — this is opt-in, not a default-on behavior change. Requests whose
72    /// declared body exceeds this get `413 Payload Too Large` and the connection is
73    /// closed (not kept alive), since bytes the server chose not to read are still
74    /// queued on the client's side of the socket.
75    pub const RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES: &'static str = "RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES";
76    pub const RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES_DEFAULT_VALUE: &'static str = "0";
77
78    /// Serve this file (e.g. `"index.html"`) for a `GET`/`HEAD` request that doesn't
79    /// match any real file/directory, instead of `404` — the standard client-side-router
80    /// ("SPA") fallback pattern needed for deep links in a React Router / Vue Router /
81    /// etc. app. Empty (default) disables it entirely. See
82    /// `crate::app::controller::static_resource` for the matching heuristic (skips
83    /// paths that look like a missed static asset, i.e. the last segment has a `.`).
84    pub const RWS_CONFIG_SPA_FALLBACK: &'static str = "RWS_CONFIG_SPA_FALLBACK";
85    pub const RWS_CONFIG_SPA_FALLBACK_DEFAULT_VALUE: &'static str = "";
86
87    /// Comma-separated path prefixes (e.g. `"/api,/healthz"`) that never receive the
88    /// SPA fallback even when `RWS_CONFIG_SPA_FALLBACK` is set — so a real API `404`
89    /// isn't silently rewritten into a `200`. Empty (default) excludes nothing.
90    pub const RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES: &'static str = "RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES";
91    pub const RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES_DEFAULT_VALUE: &'static str = "";
92
93    pub const RWS_CONFIG_TLS_CERT_FILE: &'static str = "RWS_CONFIG_TLS_CERT_FILE";
94    pub const RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE: &'static str = "";
95
96    pub const RWS_CONFIG_TLS_KEY_FILE: &'static str = "RWS_CONFIG_TLS_KEY_FILE";
97    pub const RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE: &'static str = "";
98
99    /// Path to a PEM-encoded CA certificate used to verify client certificates (mTLS).
100    /// When set, the TLS handshake requires a valid client certificate signed by this CA.
101    /// Connections without a valid cert are rejected at the TLS layer (before any HTTP processing).
102    pub const RWS_CONFIG_TLS_CLIENT_CA_FILE: &'static str = "RWS_CONFIG_TLS_CLIENT_CA_FILE";
103    pub const RWS_CONFIG_TLS_CLIENT_CA_FILE_DEFAULT_VALUE: &'static str = "";
104
105    /// Directory containing Tera HTML templates (default: `"templates"`). Requires `tera` feature.
106    pub const RWS_CONFIG_TEMPLATE_DIR: &'static str = "RWS_CONFIG_TEMPLATE_DIR";
107    pub const RWS_CONFIG_TEMPLATE_DIR_DEFAULT_VALUE: &'static str = "templates";
108
109    /// When non-empty, a plain-HTTP listener on this port redirects all requests to HTTPS.
110    /// Set to e.g. `"80"` when running on standard ports. Requires TLS to be configured.
111    pub const RWS_CONFIG_HTTP_REDIRECT_PORT: &'static str = "RWS_CONFIG_HTTP_REDIRECT_PORT";
112    pub const RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE: &'static str = "";
113
114    // ── ACME (Automatic Certificate Management Environment) ───────────────────
115
116    /// Comma-separated list of domain names to obtain a certificate for.
117    /// Setting this activates ACME at startup. Example: `"example.com,www.example.com"`
118    pub const RWS_CONFIG_ACME_DOMAINS: &'static str = "RWS_CONFIG_ACME_DOMAINS";
119    pub const RWS_CONFIG_ACME_DOMAINS_DEFAULT_VALUE: &'static str = "";
120
121    /// Contact email sent to the CA. Recommended but not required.
122    pub const RWS_CONFIG_ACME_EMAIL: &'static str = "RWS_CONFIG_ACME_EMAIL";
123    pub const RWS_CONFIG_ACME_EMAIL_DEFAULT_VALUE: &'static str = "";
124
125    /// Set to `"true"` to use the Let's Encrypt staging environment (for testing).
126    pub const RWS_CONFIG_ACME_STAGING: &'static str = "RWS_CONFIG_ACME_STAGING";
127    pub const RWS_CONFIG_ACME_STAGING_DEFAULT_VALUE: &'static str = "false";
128
129    /// Custom ACME directory URL. Defaults to Let's Encrypt production.
130    pub const RWS_CONFIG_ACME_DIRECTORY: &'static str = "RWS_CONFIG_ACME_DIRECTORY";
131    pub const RWS_CONFIG_ACME_DIRECTORY_DEFAULT_VALUE: &'static str = "";
132
133    /// Where to write the provisioned certificate chain (PEM). Defaults to `RWS_CONFIG_TLS_CERT_FILE`,
134    /// or `cert.pem` in the working directory when that is empty too.
135    pub const RWS_CONFIG_ACME_CERT_PATH: &'static str = "RWS_CONFIG_ACME_CERT_PATH";
136    pub const RWS_CONFIG_ACME_CERT_PATH_DEFAULT_VALUE: &'static str = "";
137
138    /// Where to write the certificate's private key (PEM). Defaults to `RWS_CONFIG_TLS_KEY_FILE`,
139    /// or `key.pem` in the working directory when that is empty too.
140    pub const RWS_CONFIG_ACME_KEY_PATH: &'static str = "RWS_CONFIG_ACME_KEY_PATH";
141    pub const RWS_CONFIG_ACME_KEY_PATH_DEFAULT_VALUE: &'static str = "";
142
143    /// Port for the temporary HTTP-01 challenge server (default 80).
144    /// Must be reachable from the internet on port 80. Not used with DNS-01.
145    pub const RWS_CONFIG_ACME_CHALLENGE_PORT: &'static str = "RWS_CONFIG_ACME_CHALLENGE_PORT";
146    pub const RWS_CONFIG_ACME_CHALLENGE_PORT_DEFAULT_VALUE: &'static str = "80";
147
148    /// Renew when fewer than this many days remain on the certificate (default 30).
149    pub const RWS_CONFIG_ACME_RENEW_BEFORE_DAYS: &'static str = "RWS_CONFIG_ACME_RENEW_BEFORE_DAYS";
150    /// Empty: renew at two-thirds of the certificate's lifetime (or the CA's
151    /// renewal window), not a fixed number of days before expiry.
152    pub const RWS_CONFIG_ACME_RENEW_BEFORE_DAYS_DEFAULT_VALUE: &'static str = "";
153    pub const RWS_CONFIG_ACME_PROFILE: &'static str = "RWS_CONFIG_ACME_PROFILE";
154
155    /// Path to persist the ACME account key between restarts (default `acme_account.key`).
156    pub const RWS_CONFIG_ACME_ACCOUNT_KEY_PATH: &'static str = "RWS_CONFIG_ACME_ACCOUNT_KEY_PATH";
157    pub const RWS_CONFIG_ACME_ACCOUNT_KEY_PATH_DEFAULT_VALUE: &'static str = "acme_account.key";
158
159    /// PEM file of extra root CAs to trust when talking to the ACME directory,
160    /// on top of the public Web PKI roots — for a private ACME CA (step-ca,
161    /// Pebble, an internal Boulder). Empty means public roots only.
162    pub const RWS_CONFIG_ACME_CA_FILE: &'static str = "RWS_CONFIG_ACME_CA_FILE";
163    pub const RWS_CONFIG_ACME_CA_FILE_DEFAULT_VALUE: &'static str = "";
164
165    /// Seconds between certificate-expiry checks in the renewal loop (default 12h).
166    /// After a failed renewal the next attempt comes after at most one hour.
167    pub const RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS: &'static str = "RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS";
168    pub const RWS_CONFIG_ACME_RENEW_CHECK_INTERVAL_SECS_DEFAULT_VALUE: &'static str = "43200";
169
170    /// How to prove control of the domains: `http-01` (default),
171    /// `tls-alpn-01` (on the HTTPS port) or `dns-01` (needed for wildcards).
172    pub const RWS_CONFIG_ACME_CHALLENGE: &'static str = "RWS_CONFIG_ACME_CHALLENGE";
173    /// DNS-01: `rfc2136` (a DNS UPDATE to `RWS_CONFIG_ACME_DNS_SERVER`) or
174    /// `exec` (a program that adds and removes the record).
175    pub const RWS_CONFIG_ACME_DNS_PROVIDER: &'static str = "RWS_CONFIG_ACME_DNS_PROVIDER";
176    /// DNS-01 `rfc2136`: the primary server, `host[:port]` (port 53).
177    pub const RWS_CONFIG_ACME_DNS_SERVER: &'static str = "RWS_CONFIG_ACME_DNS_SERVER";
178    /// DNS-01: the zone holding the records; found by SOA lookup when empty.
179    pub const RWS_CONFIG_ACME_DNS_ZONE: &'static str = "RWS_CONFIG_ACME_DNS_ZONE";
180    /// DNS-01 `rfc2136`: the TSIG key name the server knows.
181    pub const RWS_CONFIG_ACME_DNS_TSIG_KEY: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_KEY";
182    /// DNS-01 `rfc2136`: the TSIG secret, base64 — never printed.
183    pub const RWS_CONFIG_ACME_DNS_TSIG_SECRET: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_SECRET";
184    /// DNS-01 `rfc2136`: `hmac-sha256` (default) or `hmac-sha512`.
185    pub const RWS_CONFIG_ACME_DNS_TSIG_ALGORITHM: &'static str = "RWS_CONFIG_ACME_DNS_TSIG_ALGORITHM";
186    /// DNS-01 `exec`: the program run as `<program> present|cleanup <fqdn> <value>`.
187    pub const RWS_CONFIG_ACME_DNS_EXEC: &'static str = "RWS_CONFIG_ACME_DNS_EXEC";
188    /// DNS-01: how long to wait for the record to be visible (default 120).
189    pub const RWS_CONFIG_ACME_DNS_PROPAGATION_SECS: &'static str = "RWS_CONFIG_ACME_DNS_PROPAGATION_SECS";
190    /// DNS-01 cloudflare: the API token (DNS edit) — never printed.
191    pub const RWS_CONFIG_ACME_DNS_API_TOKEN: &'static str = "RWS_CONFIG_ACME_DNS_API_TOKEN";
192    /// DNS-01 cloudflare / route53: the API base URL instead of the
193    /// provider's own (a proxy, a test double).
194    pub const RWS_CONFIG_ACME_DNS_API_URL: &'static str = "RWS_CONFIG_ACME_DNS_API_URL";
195    /// DNS-01 cloudflare / route53: the zone's id, instead of looking it up.
196    pub const RWS_CONFIG_ACME_DNS_ZONE_ID: &'static str = "RWS_CONFIG_ACME_DNS_ZONE_ID";
197    /// Redis (`host:port`) shared by replicas: one orders, all install.
198    pub const RWS_CONFIG_ACME_REDIS: &'static str = "RWS_CONFIG_ACME_REDIS";
199    /// Password for `RWS_CONFIG_ACME_REDIS` — never printed.
200    pub const RWS_CONFIG_ACME_REDIS_PASSWORD: &'static str = "RWS_CONFIG_ACME_REDIS_PASSWORD";
201    /// Key prefix in that Redis (default `rws:acme`).
202    pub const RWS_CONFIG_ACME_REDIS_PREFIX: &'static str = "RWS_CONFIG_ACME_REDIS_PREFIX";
203    /// `true`: order a certificate at the first TLS handshake for a name
204    /// `RWS_CONFIG_ACME_ON_DEMAND_ASK` allows (since 18.4.0).
205    pub const RWS_CONFIG_ACME_ON_DEMAND: &'static str = "RWS_CONFIG_ACME_ON_DEMAND";
206    /// On-demand TLS: URL asked `?domain=<name>` before each order; 2xx allows it.
207    pub const RWS_CONFIG_ACME_ON_DEMAND_ASK: &'static str = "RWS_CONFIG_ACME_ON_DEMAND_ASK";
208
209
210    pub const RWS_DEFAULT_IP: &'static str = "127.0.0.1";
211    pub const RWS_DEFAULT_PORT: &'static i32 = &7878;
212    pub const RWS_DEFAULT_THREAD_COUNT: &'static i32 = &200;
213    pub const RWS_DEFAULT_REQUEST_ALLOCATION_SIZE_IN_BYTES: &'static i64 = &10000;
214
215
216}
217
218pub fn bootstrap() {
219    read_system_environment_variables();
220    override_environment_variables_from_config(None);
221    override_environment_variables_from_command_line_args();
222    crate::server_config::invalidate();
223}
224
225pub fn set_default_values() {
226    println!("  Initializing default values");
227
228    let is_var_set = env::var(Config::RWS_CONFIG_IP).is_ok();
229    if !is_var_set {
230        env::set_var(Config::RWS_CONFIG_IP, Config::RWS_CONFIG_IP_DEFAULT_VALUE);
231        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_IP, Config::RWS_CONFIG_IP_DEFAULT_VALUE);
232    } else {
233        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_IP);
234    }
235
236
237    let is_var_set = env::var(Config::RWS_CONFIG_PORT).is_ok();
238    if !is_var_set {
239        env::set_var(Config::RWS_CONFIG_PORT, Config::RWS_CONFIG_PORT_DEFAULT_VALUE);
240        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_PORT, Config::RWS_CONFIG_PORT_DEFAULT_VALUE);
241    } else {
242        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_PORT);
243    }
244
245    let is_var_set = env::var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES).is_ok();
246    if !is_var_set {
247        env::set_var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE);
248        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES_DEFAULT_VALUE);
249    } else {
250        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
251    }
252
253
254    let is_var_set = env::var(Config::RWS_CONFIG_THREAD_COUNT).is_ok();
255    if !is_var_set {
256        env::set_var(Config::RWS_CONFIG_THREAD_COUNT, Config::RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE);
257        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_THREAD_COUNT, Config::RWS_CONFIG_THREAD_COUNT_DEFAULT_VALUE);
258    } else {
259        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_THREAD_COUNT);
260    }
261
262    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_ALL).is_ok();
263    if !is_var_set {
264        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_ALL, Config::RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE);
265        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_ALL, Config::RWS_CONFIG_CORS_ALLOW_ALL_DEFAULT_VALUE);
266    } else {
267        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_ALL);
268    }
269
270
271    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_ORIGINS).is_ok();
272    if !is_var_set {
273        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_ORIGINS, Config::RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE);
274        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_ORIGINS, Config::RWS_CONFIG_CORS_ALLOW_ORIGINS_DEFAULT_VALUE);
275    } else {
276        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_ORIGINS);
277    }
278
279    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS).is_ok();
280    if !is_var_set {
281        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS, Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE);
282        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS, Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS_DEFAULT_VALUE);
283    } else {
284        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_CREDENTIALS);
285    }
286
287    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_HEADERS).is_ok();
288    if !is_var_set {
289        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_HEADERS, Config::RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE);
290        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_HEADERS, Config::RWS_CONFIG_CORS_ALLOW_HEADERS_DEFAULT_VALUE);
291    } else {
292        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_HEADERS);
293    }
294
295
296    let is_var_set = env::var(Config::RWS_CONFIG_CORS_ALLOW_METHODS).is_ok();
297    if !is_var_set {
298        env::set_var(Config::RWS_CONFIG_CORS_ALLOW_METHODS, Config::RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE);
299        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_ALLOW_METHODS, Config::RWS_CONFIG_CORS_ALLOW_METHODS_DEFAULT_VALUE);
300    } else {
301        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_ALLOW_METHODS);
302    }
303
304    let is_var_set = env::var(Config::RWS_CONFIG_CORS_EXPOSE_HEADERS).is_ok();
305    if !is_var_set {
306        env::set_var(Config::RWS_CONFIG_CORS_EXPOSE_HEADERS, Config::RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE);
307        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_EXPOSE_HEADERS, Config::RWS_CONFIG_CORS_EXPOSE_HEADERS_DEFAULT_VALUE);
308    } else {
309        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_EXPOSE_HEADERS);
310    }
311
312    let is_var_set = env::var(Config::RWS_CONFIG_CORS_MAX_AGE).is_ok();
313    if !is_var_set {
314        env::set_var(Config::RWS_CONFIG_CORS_MAX_AGE, Config::RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE);
315        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_CORS_MAX_AGE, Config::RWS_CONFIG_CORS_MAX_AGE_DEFAULT_VALUE);
316    } else {
317        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_CORS_MAX_AGE);
318    }
319
320
321    let is_var_set = env::var(Config::RWS_CONFIG_TLS_CERT_FILE).is_ok();
322    if !is_var_set {
323        env::set_var(Config::RWS_CONFIG_TLS_CERT_FILE, Config::RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE);
324        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_TLS_CERT_FILE, Config::RWS_CONFIG_TLS_CERT_FILE_DEFAULT_VALUE);
325    } else {
326        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_TLS_CERT_FILE);
327    }
328
329    let is_var_set = env::var(Config::RWS_CONFIG_TLS_KEY_FILE).is_ok();
330    if !is_var_set {
331        env::set_var(Config::RWS_CONFIG_TLS_KEY_FILE, Config::RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE);
332        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_TLS_KEY_FILE, Config::RWS_CONFIG_TLS_KEY_FILE_DEFAULT_VALUE);
333    } else {
334        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_TLS_KEY_FILE);
335    }
336
337    let is_var_set = env::var(Config::RWS_CONFIG_HTTP_REDIRECT_PORT).is_ok();
338    if !is_var_set {
339        env::set_var(Config::RWS_CONFIG_HTTP_REDIRECT_PORT, Config::RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE);
340        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_HTTP_REDIRECT_PORT, Config::RWS_CONFIG_HTTP_REDIRECT_PORT_DEFAULT_VALUE);
341    } else {
342        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_HTTP_REDIRECT_PORT);
343    }
344
345    let is_var_set = env::var(Config::RWS_CONFIG_LOG_FORMAT).is_ok();
346    if !is_var_set {
347        env::set_var(Config::RWS_CONFIG_LOG_FORMAT, Config::RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE);
348        println!("    Default value  for '{}' is '{}'", Config::RWS_CONFIG_LOG_FORMAT, Config::RWS_CONFIG_LOG_FORMAT_DEFAULT_VALUE);
349    } else {
350        println!("    There is an environment variable  for '{}', default value won't be set", Config::RWS_CONFIG_LOG_FORMAT);
351    }
352
353    crate::server_config::invalidate();
354    println!("  End of initializing default values\n");
355}
356
357
358pub fn get_ip_port_thread_count() -> (String, i32, i32) {
359    let mut ip : String = Config::RWS_CONFIG_IP_DEFAULT_VALUE.to_string();
360    let mut port: i32 = *Config::RWS_DEFAULT_PORT;
361    let mut thread_count: i32 = *Config::RWS_DEFAULT_THREAD_COUNT;
362
363    let boxed_ip = env::var(Config::RWS_CONFIG_IP);
364    if boxed_ip.is_ok() {
365        ip = boxed_ip.unwrap()
366    }
367
368    let boxed_port = env::var(Config::RWS_CONFIG_PORT);
369    if boxed_port.is_ok() {
370        let _port = boxed_port.unwrap();
371        let boxed_parse = _port.parse::<i32>();
372        if boxed_parse.is_ok() {
373            port = boxed_parse.unwrap();
374        } else {
375            eprintln!("unable to parse port value, expected number, got {}, variable: {}",
376                      _port, Config::RWS_CONFIG_PORT);
377        }
378    } else {
379        eprintln!("unable to parse port value, variable: {}", Config::RWS_CONFIG_PORT);
380    }
381
382    let boxed_thread_count = env::var(Config::RWS_CONFIG_THREAD_COUNT);
383    if boxed_thread_count.is_ok() {
384        let _thread_count = boxed_thread_count.unwrap();
385        let boxed_parse = _thread_count.parse();
386        if boxed_parse.is_ok() {
387            thread_count = boxed_parse.unwrap()
388        } else {
389            eprintln!("unable to parse thread count value, expected number, got {}, variable: {}",
390                      thread_count, Config::RWS_CONFIG_THREAD_COUNT);
391        }
392
393    } else {
394        eprintln!("unable to parse thread count value, variable: {}", Config::RWS_CONFIG_THREAD_COUNT);
395    }
396
397    (ip, port, thread_count)
398}
399
400/// Read all `[[virtual_host]]` entries from config / env vars.
401///
402/// Each entry must have `RWS_CONFIG_VIRTUAL_HOST_{N}_DOMAIN` set; reading
403/// stops at the first missing index.  `cert_file` and `key_file` default to
404/// empty string if omitted.
405pub fn get_virtual_hosts() -> Vec<VirtualHostConfig> {
406    let mut hosts = Vec::new();
407    let mut i = 0usize;
408    loop {
409        match env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_DOMAIN", i)) {
410            Err(_) => break,
411            Ok(domain) => {
412                let cert_file = env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_CERT_FILE", i))
413                    .unwrap_or_default();
414                let key_file = env::var(format!("RWS_CONFIG_VIRTUAL_HOST_{}_KEY_FILE", i))
415                    .unwrap_or_default();
416                hosts.push(VirtualHostConfig { domain, cert_file, key_file });
417                i += 1;
418            }
419        }
420    }
421    hosts
422}
423
424pub fn get_request_allocation_size() -> i64 {
425    let mut request_allocation_size: i64 = *Config::RWS_DEFAULT_REQUEST_ALLOCATION_SIZE_IN_BYTES;
426
427    let boxed_port = env::var(Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
428    if boxed_port.is_ok() {
429        let _request_allocation_size = boxed_port.unwrap();
430        let boxed_parse = _request_allocation_size.parse::<i64>();
431        if boxed_parse.is_ok() {
432            request_allocation_size = boxed_parse.unwrap();
433        } else {
434            eprintln!("unable to parse port value, expected number, got {}, variable: {}",
435                      _request_allocation_size, Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
436        }
437    } else {
438        eprintln!("unable to parse request allocation size value, variable: {}", Config::RWS_CONFIG_REQUEST_ALLOCATION_SIZE_IN_BYTES);
439    }
440
441
442    request_allocation_size
443}
444
445/// Maximum accepted request body size in bytes. `0` means unlimited (the default —
446/// enforcing a cap is opt-in). Read fresh on every call, so `RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES`
447/// takes effect immediately, the same as [`get_request_allocation_size`].
448pub fn get_max_body_size() -> u64 {
449    env::var(Config::RWS_CONFIG_MAX_BODY_SIZE_IN_BYTES)
450        .ok()
451        .and_then(|v| v.parse::<u64>().ok())
452        .unwrap_or(0)
453}
454
455/// The configured SPA-fallback file (e.g. `"index.html"`), or `None` if
456/// `RWS_CONFIG_SPA_FALLBACK` is unset/empty (the default — disabled). Read
457/// fresh on every call, so it can be toggled via `rws.config.toml` + `SIGHUP`
458/// without a restart, the same as [`get_max_body_size`].
459pub fn get_spa_fallback() -> Option<String> {
460    env::var(Config::RWS_CONFIG_SPA_FALLBACK).ok().filter(|v| !v.is_empty())
461}
462
463/// Path prefixes that never receive the SPA fallback (`RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES`,
464/// comma-separated), even when the fallback is configured. Empty (default) excludes nothing.
465pub fn get_spa_fallback_exclude_prefixes() -> Vec<String> {
466    env::var(Config::RWS_CONFIG_SPA_FALLBACK_EXCLUDE_PREFIXES)
467        .ok()
468        .map(|v| v.split(',').map(|s| s.trim().to_string()).filter(|s| !s.is_empty()).collect())
469        .unwrap_or_default()
470}
471
rust_web_server/entry_point/mod.rs

rust_web_server/entry_point/
mod.rs
