glm-5.1
3ea3f56de7
Remove src/admin/socket.rs and replace with Bearer token HTTP auth on the health check listener (port 9900). New src/admin/auth.rs provides SHA-256 key hashing with constant-time comparison; src/admin/handler.rs implements /admin/reload, /admin/status, and /admin/rotate-key. Admin endpoints return 404 when disabled (empty admin_key_path), 401 on bad auth. Config field renamed admin_socket_path → admin_key_path. Deployment files updated for key file mount instead of socket directory.
50 lines
1.3 KiB
TOML
50 lines
1.3 KiB
TOML
[package]
|
|
name = "reverse-proxy"
|
|
version = "0.1.0"
|
|
edition = "2021"
|
|
license = "MIT OR Apache-2.0"
|
|
|
|
[lib]
|
|
name = "reverse_proxy"
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "reverse-proxy"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
axum = "=0.8.9"
|
|
tokio = { version = "=1.45.1", features = ["full"] }
|
|
hyper = "=1.6.0"
|
|
hyper-util = { version = "=0.1.17", features = ["client-legacy", "http1", "http2", "tokio"] }
|
|
http-body-util = "=0.1.3"
|
|
hyper-rustls = { version = "=0.27.9", features = ["http1", "http2"] }
|
|
rustls-native-certs = "=0.8.1"
|
|
tower = "=0.5.2"
|
|
rustls = { version = "=0.23.28", features = ["aws_lc_rs"] }
|
|
tokio-rustls = "=0.26.2"
|
|
rustls-acme = { version = "=0.12.1", features = ["aws-lc-rs"] }
|
|
serde = { version = "=1.0.228", features = ["derive"] }
|
|
toml = "=0.8.23"
|
|
arc-swap = "=1.7.1"
|
|
tracing = "=0.1.41"
|
|
tracing-subscriber = { version = "=0.3.19", features = ["env-filter", "json"] }
|
|
rustls-pemfile = "=2.2.0"
|
|
rustls-pki-types = "=1.12.0"
|
|
clap = { version = "=4.6.1", features = ["derive"] }
|
|
signal-hook = "=0.3.18"
|
|
anyhow = "=1.0.102"
|
|
thiserror = "=2.0.18"
|
|
futures = "=0.3.31"
|
|
dashmap = "=6.1"
|
|
serde_json = "=1.0.140"
|
|
sd-notify = "=0.4"
|
|
subtle = "2"
|
|
sha2 = "0.10"
|
|
rand = "0.9"
|
|
hex = "0.4"
|
|
|
|
[dev-dependencies]
|
|
rcgen = "=0.13"
|
|
reqwest = { version = "=0.12", features = ["json"] }
|
|
tempfile = "=3.20" |