Wez Furlong 12f1637087 http: add https and some plumbing for auth ...

* Reuse the tls acceptor stuff from the smtp_server.
  We'll automatically generate self-signed certs when
  none are provided.
* Add trusted_hosts setting for the http server
* Add an auth middleware that will accept connections from
  trusted hosts as pre-authenticated. Other hosts must provide
  http authorization.
* Add lua hooks for the policy script to validate either http
  basic auth (user+pass), or bearer auth (token).

There's not currently an authentication storage subsystem, but
the lua hook allows for very basic stuff to be configured, and
could also be used to employ eg: looking things up from a database
once we add some lua utility functions for that purpose.

The `/metrics` endpoint will only respond to trusted IPs.

Other endpoints all require some kind of successful authentication.

2023-02-24 10:47:06 -07:00

..

src

http: add https and some plumbing for auth

2023-02-24 10:47:06 -07:00

Cargo.toml

add dkim signing

2023-02-21 21:18:49 -07:00