refactor: distinguish host between ldap and api listeners

lldap_config.docker_template.toml

@@ -8,12 +8,16 @@
 # verbose=false
 
 ## The host address that the LDAP server will be bound to.
-## To enable IPv6 support, simply switch "host" to "::1":
+## To enable IPv6 support, simply switch "ldap_host" to "::1":
-#host = "0.0.0.0"
+#ldap_host = "0.0.0.0"
 
 ## The port on which to have the LDAP server.
 #ldap_port = 3890
 
+## The host address that the HTTP server will be bound to.
+## To enable IPv6 support, simply switch "api_host" to "::1":
+#api_host = "0.0.0.0"
+
 ## The port on which to have the HTTP server, for user login and
 ## administration.
 #http_port = 17170

server/src/infra/cli.rs

@@ -54,10 +54,18 @@ pub struct RunOpts {
     #[clap(long, env = "LLDAP_SERVER_KEY_FILE")]
     pub server_key_file: Option<String>,
 
+    /// Change ldap host. Default: "0.0.0.0"
+    #[clap(long, env = "LLDAP_LDAP_HOST")]
+    pub ldap_host: Option<String>,
+
     /// Change ldap port. Default: 3890
     #[clap(long, env = "LLDAP_LDAP_PORT")]
     pub ldap_port: Option<u16>,
 
+    /// Change HTTP API host. Default: "0.0.0.0"
+    #[clap(long, env = "LLDAP_API_HOST")]
+    pub api_host: Option<String>,
+
     /// Change HTTP API port. Default: 17170
     #[clap(long, env = "LLDAP_HTTP_PORT")]
     pub http_port: Option<u16>,

server/src/infra/configuration.rs

@@ -64,10 +64,12 @@ impl std::default::Default for LdapsOptions {
 #[derive(Clone, Debug, Deserialize, Serialize, derive_builder::Builder)]
 #[builder(pattern = "owned", build_fn(name = "private_build"))]
 pub struct Configuration {
+    #[builder(default = r#"String::from("0.0.0.0")"#)]
+    pub ldap_host: String,
     #[builder(default = "3890")]
     pub ldap_port: u16,
     #[builder(default = r#"String::from("0.0.0.0")"#)]
-    pub host: String,
+    pub api_host: String,
     #[builder(default = "17170")]
     pub http_port: u16,
     #[builder(default = r#"SecUtf8::from("secretjwtsecret")"#)]

server/src/infra/ldap_server.rs

@@ -177,7 +177,7 @@ where
 
     info!("Starting the LDAP server on port {}", config.ldap_port);
     let server_builder = server_builder
-        .bind("ldap", (config.host.clone(), config.ldap_port), binder)
+        .bind("ldap", (config.ldap_host.clone(), config.ldap_port), binder)
         .with_context(|| format!("while binding to the port {}", config.ldap_port));
     if config.ldaps_options.enabled {
         let tls_context = (
@@ -214,7 +214,7 @@ where
         server_builder.and_then(|s| {
             s.bind(
                 "ldaps",
-                (config.host.clone(), config.ldaps_options.port),
+                (config.ldap_host.clone(), config.ldaps_options.port),
                 tls_binder,
             )
             .with_context(|| format!("while binding to the port {}", config.ldaps_options.port))

server/src/infra/tcp_server.rs

@@ -129,30 +129,34 @@ where
     let mail_options = config.smtp_options.clone();
     info!("Starting the API/web server on port {}", config.http_port);
     server_builder
-        .bind("http", (config.host.clone(), config.http_port), move || {
+        .bind(
-            let backend_handler = backend_handler.clone();
+            "http",
-            let jwt_secret = jwt_secret.clone();
+            (config.api_host.clone(), config.http_port),
-            let jwt_blacklist = jwt_blacklist.clone();
+            move || {
-            let server_url = server_url.clone();
+                let backend_handler = backend_handler.clone();
-            let mail_options = mail_options.clone();
+                let jwt_secret = jwt_secret.clone();
-            HttpServiceBuilder::new()
+                let jwt_blacklist = jwt_blacklist.clone();
-                .finish(map_config(
+                let server_url = server_url.clone();
-                    App::new()
+                let mail_options = mail_options.clone();
-                        .wrap(tracing_actix_web::TracingLogger::<CustomRootSpanBuilder>::new())
+                HttpServiceBuilder::new()
-                        .configure(move |cfg| {
+                    .finish(map_config(
-                            http_config(
+                        App::new()
-                                cfg,
+                            .wrap(tracing_actix_web::TracingLogger::<CustomRootSpanBuilder>::new())
-                                backend_handler,
+                            .configure(move |cfg| {
-                                jwt_secret,
+                                http_config(
-                                jwt_blacklist,
+                                    cfg,
-                                server_url,
+                                    backend_handler,
-                                mail_options,
+                                    jwt_secret,
-                            )
+                                    jwt_blacklist,
-                        }),
+                                    server_url,
-                    |_| AppConfig::default(),
+                                    mail_options,
-                ))
+                                )
-                .tcp()
+                            }),
-        })
+                        |_| AppConfig::default(),
+                    ))
+                    .tcp()
+            },
+        )
         .with_context(|| {
             format!(
                 "While bringing up the TCP server with port {}",