http_config.hpp

Go to the documentation of this file.

#pragma once
 
#include "aria/abi/export.hpp"
 
#include <cstddef>
#include <cstdint>
#include <string>
 
namespace aria::adapters::http {

struct ARIA_HTTP_API HttpAdapterConfig {
    std::string host{"127.0.0.1"};

    std::uint16_t port{9090};

    std::string api_prefix{"/aria"};

    std::string static_root{};

    int worker_threads{0};

    int heartbeat_sec{25};

    int max_sse_clients{64};

    std::size_t max_pending_sse_bytes{4 * 1024 * 1024};

    std::size_t max_pending_notifications{1024};

    bool enable_cors{false};
 
    // ── TLS (HTTPS) ──────────────────────────────────────────────────
    //
    // When `tls_cert_file` and `tls_key_file` are both non-empty AND
    // the adapter was built with `ARIA_HTTP_ENABLE_TLS=ON` (which links
    // OpenSSL statically — see cmake/BuildOpenSSL.cmake), the server
    // serves HTTPS instead of plain HTTP. Both endpoints (REST and
    // SSE) move to TLS.
    //
    // Set BOTH cert and key paths to PEM files. Optionally set
    // `tls_ca_file` to require client certificate verification (mTLS).
    // Set `tls_min_version` to enforce a minimum TLS version
    // ("1.2" or "1.3"; default is "1.2" — TLS 1.0/1.1 are always
    // refused).
    //
    // For local development you can quickly mint a self-signed cert:
    //
    //   openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem
    //       -out cert.pem -days 365 -subj "/CN=localhost"
    //
    // For production, use a real CA-issued cert (Let's Encrypt etc.).

    std::string tls_cert_file{};

    std::string tls_key_file{};

    std::string tls_ca_file{};

    std::string tls_min_version{"1.2"};
};
 
}  // namespace aria::adapters::http