Struct ConfigManager 

pub struct ConfigManager { /* private fields */ }

Centralized configuration manager that coordinates updates across all runtime managers.

Implementations

impl ConfigManager

pub fn new( config: Arc<RwLock<ConfigFile>>, sites: Arc<RwLock<Vec<SiteConfig>>>, vhost: Arc<RwLock<VhostMatcher>>, waf: Arc<RwLock<SiteWafManager>>, rate_limiter: Arc<RwLock<RateLimitManager>>, access_lists: Arc<RwLock<AccessListManager>>, ) -> Self

Creates a new ConfigManager with references to all runtime managers.

pub fn with_persistence(self, path: impl AsRef<Path>) -> Self

Enables configuration persistence to the specified file path.

pub fn with_rules( self, engine: Arc<RwLock<Synapse>>, rules_path: Option<PathBuf>, rules_hash: Option<Arc<RwLock<String>>>, ) -> Self

Enable rule management with a shared Synapse engine and optional persistence.

pub fn create_site( &self, req: CreateSiteRequest, ) -> Result<MutationResult, ConfigManagerError>

Creates a new site configuration.

pub fn get_site( &self, hostname: &str, ) -> Result<SiteDetailResponse, ConfigManagerError>

Retrieves detailed information about a site.

pub fn list_sites(&self) -> Vec<String>

Lists all configured site hostnames.

pub fn get_sites_info(&self) -> Vec<SiteInfo>

Returns full site info for all sites (for API response).

pub fn update_site( &self, hostname: &str, req: UpdateSiteRequest, ) -> Result<MutationResult, ConfigManagerError>

Updates an existing site configuration.

pub fn delete_site( &self, hostname: &str, ) -> Result<MutationResult, ConfigManagerError>

Deletes a site configuration.

pub fn get_full_config(&self) -> ConfigFile

Retrieves the full runtime configuration.

pub fn config_hash(&self) -> String

Computes a stable hash of the current configuration for diagnostics.

pub fn rules_hash(&self) -> String

Returns the current rules hash (or computes one if not cached).

pub fn update_full_config( &self, new_config: ConfigFile, ) -> Result<MutationResult, ConfigManagerError>

Updates the full configuration (hot reload).

This replaces the entire configuration state and triggers a rebuild of all dependent components (VHost, WAF, RateLimit, AccessList).

pub fn update_site_waf( &self, hostname: &str, waf_req: SiteWafRequest, ) -> Result<MutationResult, ConfigManagerError>

Updates only the WAF configuration for a site.

pub fn update_site_rate_limit( &self, hostname: &str, rate_limit: RateLimitRequest, ) -> Result<MutationResult, ConfigManagerError>

Updates only the rate limit configuration for a site.

pub fn update_site_access_list( &self, hostname: &str, access_list: AccessListRequest, ) -> Result<MutationResult, ConfigManagerError>

Updates only the access list configuration for a site.

pub fn list_rules(&self) -> Vec<StoredRule>

List all rules currently stored on the sensor.

pub fn create_rule( &self, rule: StoredRule, ) -> Result<StoredRule, ConfigManagerError>

Create a new rule and apply it to the WAF engine.

pub fn update_rule( &self, rule_id: &str, update: CustomRuleUpdate, ) -> Result<StoredRule, ConfigManagerError>

Update an existing rule and apply changes to the WAF engine.

pub fn delete_rule(&self, rule_id: &str) -> Result<(), ConfigManagerError>

Delete a rule by ID and apply changes to the WAF engine.

pub fn replace_rules( &self, rules: Vec<StoredRule>, hash_override: Option<String>, ) -> Result<usize, ConfigManagerError>

Replace all rules with a new set and apply to the WAF engine.

pub fn update_waf_rules( &self, rules_json: &[u8], hash_override: Option<&str>, ) -> Result<usize, ConfigManagerError>

Updates WAF rules from JSON bytes received from Horizon Hub.

This method is called when the sensor receives a RulesUpdate or PushRules message from the Signal Horizon Hub via WebSocket. The rules are parsed and applied to the WAF engine.

Arguments

• rules_json - JSON bytes containing an array of rule definitions
• hash_override - Optional hash provided by Signal Horizon

Returns

• Ok(count) - Number of rules received (including disabled rules)
• Err - If rules parsing or application fails