fix: allow mgmt api to use tls

hjr3 · Feb 12, 2024 · 4ea6ec5 · 4ea6ec5
1 parent 70d1442
commit 4ea6ec5
Showing 1 changed file with 19 additions and 10 deletions.
diff --git a/crates/proxy/src/main.rs b/crates/proxy/src/main.rs
@@ -31,16 +31,6 @@ async fn main() -> Result<()> {
     let mgmt_listener = config.management.listen.parse()?;
     let ingest_listener = config.proxy.listen.parse()?;
 
-    tokio::spawn(async move {
-        tracing::info!("management API listening on {}", mgmt_listener);
-        if let Err(err) = axum_server::bind(mgmt_listener)
-            .serve(mgmt.into_make_service())
-            .await
-        {
-            eprintln!("Failed to start management API server: {}", err);
-        }
-    });
-
     tokio::spawn(async move {
         tracing::info!("starting retry queue");
         retry_queue.start().await;
@@ -54,6 +44,25 @@ async fn main() -> Result<()> {
         None
     };
 
+    let mgmt_tls_config = tls_config.clone();
+    tokio::spawn(async move {
+        tracing::info!("management API listening on {}", mgmt_listener);
+        if let Some(tls_config) = mgmt_tls_config {
+            tracing::info!("tls configured for {}", mgmt_listener);
+            if let Err(err) = axum_server::bind_rustls(mgmt_listener, tls_config)
+                .serve(mgmt.into_make_service())
+                .await
+            {
+                eprintln!("Failed to start management API server: {}", err);
+            }
+        } else if let Err(err) = axum_server::bind(mgmt_listener)
+            .serve(mgmt.into_make_service())
+            .await
+        {
+            eprintln!("Failed to start management API server: {}", err);
+        }
+    });
+
     tracing::info!("ingest listening on {}", ingest_listener);
     if let Some(tls_config) = tls_config {
         tracing::info!("tls configured for {}", ingest_listener);