Function main

gateway/src/main.rs:232–359

()

#[rocket::main]
async fn main() -> Result<()> {
    {
        use tracing_subscriber::{fmt, EnvFilter};
        let filter = EnvFilter::try_from_default_env().unwrap_or_else(|_| EnvFilter::new("info"));
        fmt().with_env_filter(filter).with_ansi(false).init();
    }

    let _ = rustls::crypto::ring::default_provider().install_default();

    let args = Args::parse();
    let figment = config::load_config_figment(args.config.as_deref());

    let config = figment.focus("core").extract::<Config>()?;

    // Validate node_id
    if config.sync.enabled && config.sync.node_id == 0 {
        anyhow::bail!("node_id must be greater than 0");
    }

    config::setup_wireguard(&config.wg)?;

    let tls_config = figment
        .focus("tls")
        .extract::<TlsConfig>()
        .context("Failed to extract tls config")?;
    maybe_gen_certs(&config, &tls_config)
        .await
        .context("Failed to generate certs")?;

    #[cfg(unix)]
    if config.set_ulimit {
        set_max_ulimit()?;
    }

    let my_app_id = if config.debug.insecure_skip_attestation {
        None
    } else {
        let dstack_client = dstack_agent().context("Failed to create dstack client")?;
        let info = dstack_client
            .info()
            .await
            .context("Failed to get app info")?;
        Some(info.app_id)
    };
    let proxy_config = config.proxy.clone();
    let pccs_url = config.pccs_url.clone();
    let admin_enabled = config.admin.enabled;
    let debug_config = config.debug.clone();
    let state = Proxy::new(ProxyOptions {
        config,
        my_app_id,
        tls_config,
    })
    .await?;
    info!("Starting background tasks");
    state.start_bg_tasks().await?;
    state.lock().reconfigure()?;