Struct Config 

pub struct Config {

    pub bind_addr: SocketAddr,
    pub public_url: String,
    pub instance_name: String,
    pub database: PgConnectOptions,
    pub database_password: Option<String>,
    pub database_display: String,
    pub db_max_connections: u32,
    pub vault_dir: PathBuf,
    pub max_upload_bytes: u64,
    pub preview: PreviewLimits,
    pub preview_cache_max_bytes: u64,
    pub upload_chunk_bytes: u64,
    pub clamd: Option<ScannerConfig>,
    pub backup_passphrase: Option<String>,
    pub session_ttl: Duration,
    pub approval_reauth: ApprovalReauth,
    pub audit_retention_days: u32,
    pub retention_latest_grace_days: u32,
    pub signin_max_failures: u32,
    pub oidc_token_idle_days: u32,
    pub metrics_token: Option<String>,
    pub cookie_secure: bool,
    pub log_format: LogFormat,
    pub bootstrap_admin: Option<BootstrapAdmin>,
    pub oidc: Option<OidcConfig>,
    pub local_login: bool,
    pub mattermost_error_webhook: Option<String>,
    pub smtp: Option<SmtpConfig>,
    pub request_digest_hours: u64,
    pub mattermost: Option<MattermostConfig>,
    pub assistant: Option<AssistantConfig>,
    pub local_agents: LocalAgents,
    pub webhooks: WebhookConfig,
}

Fields

bind_addr: SocketAddr

Socket address the HTTP server binds to.

public_url: String

Externally visible base URL without trailing slash, e.g. https://plm.example.org.

instance_name: String

Name shown in the UI header and page titles.

database: PgConnectOptions

PostgreSQL connection options (contains the password – never log it).

database_password: Option<String>

Password of the database connection, for tools that receive it in their environment (PGPASSWORD of pg_dump/pg_restore). Secret – never log it.

database_display: String

Human readable, password-free description of the database target.

db_max_connections: u32

vault_dir: PathBuf

Root directory of the file vault (and of the cached 3D previews).

max_upload_bytes: u64

preview: PreviewLimits

Size and memory limits of the 3D preview (TEAMCRAFT_PREVIEW_MAX_*).

preview_cache_max_bytes: u64

Size the preview cache (<vault>/previews) is trimmed to by the hourly housekeeping, least recently used first (TEAMCRAFT_PREVIEW_CACHE_MAX_MB; 0 = no limit).

upload_chunk_bytes: u64

Largest chunk of a chunked, resumable upload (PATCH /api/v1/uploads/{id}).

clamd: Option<ScannerConfig>

Malware scan of uploads with a ClamAV daemon (TEAMCRAFT_CLAMD_ADDR, TEAMCRAFT_CLAMD_MAX_MB); None = no scan.

backup_passphrase: Option<String>

Passphrase of encrypted backups (TEAMCRAFT_BACKUP_PASSPHRASE, used by teamcraft backup --encrypt and the restore). Secret – never log it.

session_ttl: Duration

approval_reauth: ApprovalReauth

Whether review decisions in the browser need a fresh sign-in (TEAMCRAFT_APPROVAL_REAUTH: off, release, every_decision).

audit_retention_days: u32

Days the audit log is kept (TEAMCRAFT_AUDIT_RETENTION_DAYS; 0 = for ever). Older entries are removed by the hourly housekeeping, which records the removal as one entry.

retention_latest_grace_days: u32

Days after which the old versions of files with the retention latest are removed by the hourly housekeeping (TEAMCRAFT_RETENTION_LATEST_GRACE_DAYS; 0 = only the CLI removes them). Files keep every version unless someone sets latest.

signin_max_failures: u32

Failed password sign-ins per username within 15 minutes before sign-in is refused (TEAMCRAFT_SIGNIN_MAX_FAILURES; five times as many per client address; 0 = off). See crate::auth::SignInThrottle.

oidc_token_idle_days: u32

Idle lifetime in days of new API and desktop tokens of single sign-on users (TEAMCRAFT_OIDC_TOKEN_IDLE_DAYS; 0 = off, the default): a token without an expiry or with a longer one expires after that many days without use, so a leaver removed only at the identity provider does not keep a working token (issue #173).

metrics_token: Option<String>

Bearer token of GET /metrics; None = the endpoint is off.

cookie_secure: bool

Adds the Secure attribute to cookies (required when served via HTTPS).

log_format: LogFormat

bootstrap_admin: Option<BootstrapAdmin>

Initial administrator that is created when the database has no users.

oidc: Option<OidcConfig>

Single sign-on via OpenID Connect (Authentik). None = disabled.

local_login: bool

Whether username/password login for local accounts is offered.

mattermost_error_webhook: Option<String>

Mattermost incoming webhook that receives internal server errors.

smtp: Option<SmtpConfig>

E-mail notifications via SMTP. None = no e-mails.

request_digest_hours: u64

Hours between two e-mail digests of the change requests waiting for triage (per user and project group); 0 = no digests.

mattermost: Option<MattermostConfig>

Notifications to Mattermost. None = disabled.

assistant: Option<AssistantConfig>

The built-in assistant (Anthropic or an OpenAI-compatible API). None = disabled.

local_agents: LocalAgents

Whether users may connect their own local agents (the desktop app’s Agent view, ACP) to TeamCraft’s tools (TEAMCRAFT_LOCAL_AGENTS). Off leaves only the server-side assistant. See LocalAgents.

webhooks: WebhookConfig

Which targets outgoing event webhooks may reach.

Implementations

impl Config

pub fn from_env() -> Result<Self>

Reads the configuration from the process environment.

pub fn from_lookup<F>(lookup: F) -> Result<Self>

where F: Fn(&str) -> Option<String>,

Reads the configuration through an arbitrary lookup function (used by tests).

pub fn summary(&self) -> String

Password-free summary for the startup log.

Trait Implementations

impl Clone for Config

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.