1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
|
use anyhow::Result;
use clap::{Parser, ValueEnum};
use serde::{Deserialize, Serialize};
/// Database backend type for the relay
#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq, Default, ValueEnum)]
#[serde(rename_all = "lowercase")]
pub enum DatabaseBackend {
/// LMDB backend (persistent, general purpose)
#[default]
Lmdb,
/// NostrDB backend (persistent, optimized for Nostr)
NostrDb,
/// In-memory database (fastest, no persistence - uses temp directory for git data)
Memory,
}
impl std::fmt::Display for DatabaseBackend {
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
match self {
Self::Memory => write!(f, "memory"),
Self::NostrDb => write!(f, "nostrdb"),
Self::Lmdb => write!(f, "lmdb"),
}
}
}
/// ngit-grasp - A GRASP (Git Relays Authorized via Signed-Nostr Proofs) implementation
///
/// Configuration is loaded with the following priority (highest to lowest):
/// 1. CLI flags (e.g., --domain example.com)
/// 2. Environment variables (e.g., NGIT_DOMAIN=example.com)
/// 3. .env file (loaded automatically if present)
/// 4. Built-in defaults
#[derive(Debug, Clone, Serialize, Deserialize, Parser)]
#[command(author, version, about, long_about = None)]
#[command(propagate_version = true)]
pub struct Config {
/// Domain where this instance is hosted (required, used in GRASP validation)
#[arg(long, env = "NGIT_DOMAIN")]
pub domain: String,
/// Owner's npub (optional, for relay info in NIP-11)
#[arg(long, env = "NGIT_OWNER_NPUB")]
pub owner_npub: Option<String>,
/// Relay name for NIP-11 information document (defaults to "${domain} grasp relay")
#[arg(long = "relay-name", env = "NGIT_RELAY_NAME")]
pub relay_name_override: Option<String>,
/// Relay description for NIP-11 information document
#[arg(
long,
env = "NGIT_RELAY_DESCRIPTION",
default_value = "Git Nostr Relay - a grasp implementation"
)]
pub relay_description: String,
/// Path to store Git repositories
#[arg(long, env = "NGIT_GIT_DATA_PATH", default_value = "./data/git")]
pub git_data_path: String,
/// Path to store Nostr relay data
#[arg(long, env = "NGIT_RELAY_DATA_PATH", default_value = "./data/relay")]
pub relay_data_path: String,
/// Server bind address (IP:PORT)
#[arg(long, env = "NGIT_BIND_ADDRESS", default_value = "127.0.0.1:8080")]
pub bind_address: String,
/// Database backend type
#[arg(long, env = "NGIT_DATABASE_BACKEND", value_enum, default_value_t = DatabaseBackend::Lmdb)]
pub database_backend: DatabaseBackend,
/// Enable Prometheus metrics endpoint
#[arg(long, env = "NGIT_METRICS_ENABLED", default_value_t = true)]
pub metrics_enabled: bool,
/// Connections per IP before flagging as potential abuse in metrics (display only, no rate limiting)
#[arg(
long = "metrics-connection-per-ip-abuse-threshold",
env = "NGIT_METRICS_CONNECTION_PER_IP_ABUSE_THRESHOLD",
default_value_t = 10
)]
pub metrics_connection_per_ip_abuse_threshold: u32,
/// Number of top bandwidth repos to track in metrics
#[arg(
long = "metrics-top-n-repos",
env = "NGIT_METRICS_TOP_N_REPOS",
default_value_t = 10
)]
pub metrics_top_n_repos: usize,
/// URL of bootstrap relay to sync from on startup (optional)
/// Sync discovers additional relays from repository announcements that list our service
#[arg(long, env = "NGIT_SYNC_BOOTSTRAP_RELAY_URL")]
pub sync_bootstrap_relay_url: Option<String>,
/// Maximum backoff time in seconds for sync relay reconnection (default: 3600 = 1 hour)
#[arg(long, env = "NGIT_SYNC_MAX_BACKOFF_SECS", default_value_t = 3600)]
pub sync_max_backoff_secs: u64,
/// Interval in seconds for checking disconnected relays and attempting reconnection (default: 60)
/// Set to lower value for faster reconnection testing
#[arg(
long,
env = "NGIT_SYNC_DISCONNECT_CHECK_INTERVAL_SECS",
default_value_t = 60
)]
pub sync_disconnect_check_interval_secs: u64,
/// Base backoff time in seconds for relay reconnection (default: 5)
/// Used for exponential backoff: base * 2^(failures-1)
/// Set to 1 for faster test cycles
/// Note: The connection timeout is capped at this value
#[arg(long, env = "NGIT_SYNC_BASE_BACKOFF_SECS", default_value_t = 5)]
pub sync_base_backoff_secs: u64,
/// Disable NIP-77 negentropy sync (default: false)
/// When enabled, sync will use REQ+EOSE instead of negentropy for history sync.
/// Primarily useful for testing that sync works without negentropy support.
#[arg(long, env = "NGIT_SYNC_DISABLE_NEGENTROPY", default_value_t = false)]
pub sync_disable_negentropy: bool,
}
impl Config {
/// Load configuration from CLI args, environment variables, and defaults.
///
/// Priority (highest to lowest):
/// 1. CLI flags
/// 2. Environment variables
/// 3. .env file
/// 4. Built-in defaults
pub fn load() -> Result<Self> {
// Load .env file if present (before clap parses, so env vars are available)
dotenvy::dotenv().ok();
// Parse CLI args (clap automatically handles env var fallback)
let config = Self::parse();
Ok(config)
}
/// Get relay name (defaults to "${domain} grasp relay" if not set)
pub fn relay_name(&self) -> String {
self.relay_name_override
.clone()
.unwrap_or_else(|| format!("{} grasp relay", self.domain))
}
/// Get effective git data path
/// Returns a temp directory when using memory backend, otherwise the configured path
pub fn effective_git_data_path(&self) -> String {
if self.database_backend == DatabaseBackend::Memory {
std::env::temp_dir()
.join("ngit-grasp-git")
.to_string_lossy()
.into_owned()
} else {
self.git_data_path.clone()
}
}
/// Create config for testing
#[cfg(test)]
pub fn for_testing() -> Self {
Self {
domain: "localhost:8080".to_string(),
owner_npub: Some("npub1test".to_string()),
relay_name_override: Some("test relay".to_string()),
relay_description: "test description".to_string(),
git_data_path: "./test_data/git".to_string(),
relay_data_path: "./test_data/relay".to_string(),
bind_address: "127.0.0.1:8080".to_string(),
database_backend: DatabaseBackend::Memory,
metrics_enabled: true,
metrics_connection_per_ip_abuse_threshold: 10,
metrics_top_n_repos: 10,
sync_bootstrap_relay_url: None,
sync_max_backoff_secs: 3600,
sync_disconnect_check_interval_secs: 60,
sync_base_backoff_secs: 5,
sync_disable_negentropy: false,
}
}
}
#[cfg(test)]
mod tests {
use super::*;
#[test]
fn test_default_values() {
let config = Config::for_testing();
assert_eq!(config.domain, "localhost:8080");
assert_eq!(config.bind_address, "127.0.0.1:8080");
// for_testing() uses Memory, but the actual default is Lmdb
assert_eq!(config.database_backend, DatabaseBackend::Memory);
}
#[test]
fn test_lmdb_is_default() {
// Verify the actual default via the enum's Default trait
assert_eq!(DatabaseBackend::default(), DatabaseBackend::Lmdb);
}
#[test]
fn test_memory_backend_uses_temp_dir() {
let config = Config {
database_backend: DatabaseBackend::Memory,
..Config::for_testing()
};
let git_path = config.effective_git_data_path();
assert!(git_path.contains("ngit-grasp-git"));
}
#[test]
fn test_lmdb_backend_uses_configured_path() {
let config = Config {
database_backend: DatabaseBackend::Lmdb,
git_data_path: "./my/git/path".to_string(),
relay_data_path: "./my/relay/path".to_string(),
..Config::for_testing()
};
assert_eq!(config.effective_git_data_path(), "./my/git/path");
}
#[test]
fn test_database_backend_display() {
assert_eq!(DatabaseBackend::Memory.to_string(), "memory");
assert_eq!(DatabaseBackend::NostrDb.to_string(), "nostrdb");
assert_eq!(DatabaseBackend::Lmdb.to_string(), "lmdb");
}
#[test]
fn test_relay_name_default() {
let config = Config {
domain: "example.com".to_string(),
relay_name_override: None,
..Config::for_testing()
};
assert_eq!(config.relay_name(), "example.com grasp relay");
}
#[test]
fn test_relay_name_override() {
let config = Config {
domain: "example.com".to_string(),
relay_name_override: Some("My Custom Relay".to_string()),
..Config::for_testing()
};
assert_eq!(config.relay_name(), "My Custom Relay");
}
#[test]
fn test_owner_npub_optional() {
let config = Config {
owner_npub: None,
..Config::for_testing()
};
assert!(config.owner_npub.is_none());
}
#[test]
fn test_metrics_config_defaults() {
let config = Config::for_testing();
assert!(config.metrics_enabled);
assert_eq!(config.metrics_connection_per_ip_abuse_threshold, 10);
assert_eq!(config.metrics_top_n_repos, 10);
}
#[test]
fn test_metrics_config_custom_values() {
let config = Config {
metrics_enabled: false,
metrics_connection_per_ip_abuse_threshold: 50,
metrics_top_n_repos: 25,
..Config::for_testing()
};
assert!(!config.metrics_enabled);
assert_eq!(config.metrics_connection_per_ip_abuse_threshold, 50);
assert_eq!(config.metrics_top_n_repos, 25);
}
}
|