reverse-proxy

alkdev/reverse-proxy

Fork 0

Commit Graph

Author	SHA1	Message	Date
glm-5.1	b11f15d977	Implement ACME certificate provisioning with rustls-acme Add ACME TLS module with automatic Let's Encrypt certificate provisioning and renewal using rustls-acme 0.12. Each listener creates its own AcmeConfig with domain list, cache directory, and Let's Encrypt directory URL. The ACME state machine runs as a background tokio task per listener, and ResolvesServerCertAcme serves the provisioned certificate. Certificate failure behavior: fail to start without valid cert, continue serving if one exists. TLS-ALPN-01 is the default challenge type with acme-tls/1 ALPN registered. Cipher suites restricted to 4 TLS 1.2 + all TLS 1.3 suites. Also implements manual TLS mode with PEM file loading, SNI-based cert resolution, and shared CryptoProvider with restricted cipher suites.	2026-06-11 11:55:00 +00:00
glm-5.1	97178800f9	Initialize Rust project with Cargo, dependencies, and module skeleton Set up single-binary reverse-proxy project with all core dependencies (axum, tokio, hyper, tower, rustls, tokio-rustls, rustls-acme, serde, toml, arc-swap, tracing, tracing-subscriber, rustls-pemfile, rustls-pki-types, clap, signal-hook, anyhow, thiserror) pinned to exact versions. Create module skeleton (config, proxy, tls, rate_limit, logging, admin, health, shutdown) matching architecture spec.	2026-06-11 11:34:53 +00:00

Author

SHA1

Message

Date

glm-5.1

b11f15d977

Implement ACME certificate provisioning with rustls-acme

Add ACME TLS module with automatic Let's Encrypt certificate provisioning
and renewal using rustls-acme 0.12. Each listener creates its own AcmeConfig
with domain list, cache directory, and Let's Encrypt directory URL. The ACME
state machine runs as a background tokio task per listener, and
ResolvesServerCertAcme serves the provisioned certificate. Certificate
failure behavior: fail to start without valid cert, continue serving if one
exists. TLS-ALPN-01 is the default challenge type with acme-tls/1 ALPN
registered. Cipher suites restricted to 4 TLS 1.2 + all TLS 1.3 suites.

Also implements manual TLS mode with PEM file loading, SNI-based cert
resolution, and shared CryptoProvider with restricted cipher suites.

2026-06-11 11:55:00 +00:00

glm-5.1

97178800f9

Initialize Rust project with Cargo, dependencies, and module skeleton

Set up single-binary reverse-proxy project with all core dependencies
(axum, tokio, hyper, tower, rustls, tokio-rustls, rustls-acme, serde,
toml, arc-swap, tracing, tracing-subscriber, rustls-pemfile,
rustls-pki-types, clap, signal-hook, anyhow, thiserror) pinned to exact
versions. Create module skeleton (config, proxy, tls, rate_limit,
logging, admin, health, shutdown) matching architecture spec.

2026-06-11 11:34:53 +00:00

2 Commits