Struct TunnelDoor 

pub struct TunnelDoor {
    pub contact_email: String,
    pub zone_id: String,
    pub token_secret: String,
    pub ports: BTreeMap<String, u16>,
}

What a passway door behind a cloudflare tunnel needs that a public door does not (R910-F2): where its per-hostname loopback listeners are, and the inputs to issue its own certificates by DNS-01 — the only ACME challenge that works when nothing public reaches the node.

One door (one cold passway, one certificate) per hostname, which is the per-tenant shape yubaba’s tenant tier arms — so each hostname names its own port rather than sharing one listener.

Fields

contact_email: String

ACME account contact.

zone_id: String

Cloudflare zone id the _acme-challenge TXT records are written into.

token_secret: String

Cluster secret holding a Zone:DNS:Edit token for that zone, declared in the machines’ sovereign group with an access rule naming each hostname’s door (passway.<hostname>).

ports: BTreeMap<String, u16>

Loopback port each hostname’s door listens on — the demux backend the tunnel’s SNI is spliced to. Every fronted hostname needs one.

Trait Implementations

impl Clone for TunnelDoor

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TunnelDoor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TunnelDoor

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TunnelDoor

impl PartialEq for TunnelDoor

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for TunnelDoor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for TunnelDoor