zhenyi
d243dce027
- Replaced manual remote client functions with remote_client! macro for archive, blame, branch, commit, and diff services - Simplified remote client creation logic using declarative macro approach - Maintained same functionality while reducing code duplication across services security(bare): enhance path traversal protection with comprehensive validation - Added early relative_path validation to prevent path traversal attacks - Implemented unified path validation to avoid TOCTOU race conditions - Enhanced canonicalization checks for both existing and non-existent paths - Added detailed logging for path traversal detection attempts feat(cache): migrate from CLruCache to Moka with TTL and invalidation support - Replaced clru dependency with moka for improved caching capabilities - Added 300-second time-to-live for cache entries - Implemented repository-specific cache invalidation mechanism - Enhanced cache operations with thread-safe async support refactor(commit): improve security validation for commit operations - Added ref name validation to prevent command injection in cherry_pick_commit - Implemented revision validation for commit selectors - Added comprehensive input validation for create_commit parameters - Enhanced file path validation to prevent traversal
56 lines
2.0 KiB
Rust
56 lines
2.0 KiB
Rust
use std::path::PathBuf;
|
|
|
|
use gitks::actor::init_actor_cluster;
|
|
use gitks::server::{GitksService, serve};
|
|
|
|
const DEFAULT_HOST: &str = "0.0.0.0";
|
|
const DEFAULT_PORT: &str = "50051";
|
|
const DEFAULT_STORAGE_NAME: &str = "default";
|
|
|
|
#[tokio::main]
|
|
async fn main() -> Result<(), Box<dyn std::error::Error>> {
|
|
dotenvy::dotenv().ok();
|
|
tracing_subscriber::fmt().init();
|
|
|
|
tracing::info!(version = env!("CARGO_PKG_VERSION"), "gitks starting up");
|
|
|
|
let host = std::env::var("GITKS_HOST").unwrap_or_else(|_| DEFAULT_HOST.into());
|
|
let port = std::env::var("GITKS_PORT").unwrap_or_else(|_| DEFAULT_PORT.into());
|
|
let storage_name =
|
|
std::env::var("STORAGE_NAME").unwrap_or_else(|_| DEFAULT_STORAGE_NAME.into());
|
|
let grpc_addr =
|
|
std::env::var("GITKS_ADVERTISE_ADDR").unwrap_or_else(|_| format!("http://{host}:{port}"));
|
|
|
|
let repo_prefix = std::env::var("REPO_PREFIX_PATH")
|
|
.map_err(|_| "REPO_PREFIX_PATH environment variable is required (e.g. /data/repos)")?;
|
|
let repo_prefix = PathBuf::from(&repo_prefix);
|
|
if !repo_prefix.is_absolute() {
|
|
return Err("REPO_PREFIX_PATH must be an absolute path".into());
|
|
}
|
|
if !repo_prefix.exists() {
|
|
tracing::info!(path = %repo_prefix.display(), "creating repo prefix directory");
|
|
std::fs::create_dir_all(&repo_prefix)?;
|
|
}
|
|
|
|
let addr: std::net::SocketAddr = format!("{host}:{port}").parse()?;
|
|
let svc = GitksService::new(repo_prefix.clone());
|
|
let (node_actor, node_handle) =
|
|
init_actor_cluster(svc.clone(), storage_name.clone(), grpc_addr.clone()).await?;
|
|
let svc = svc
|
|
.with_actor(node_actor.clone())
|
|
.with_grpc_addr(grpc_addr.clone());
|
|
|
|
tracing::info!(
|
|
"starting gitks gRPC server on {addr}, repo prefix: {}, storage: {storage_name}, advertise: {grpc_addr}",
|
|
repo_prefix.display()
|
|
);
|
|
|
|
serve(addr, svc).await?;
|
|
|
|
node_actor.stop(None);
|
|
node_handle.await?;
|
|
|
|
tracing::info!("gitks shut down");
|
|
Ok(())
|
|
}
|