Cargo.toml

[workspace]
resolver = "3"
members = [".", "crates/api", "crates/cfg", "crates/cli", "crates/zonedata"]
default-members = [".", "crates/cli"]

[workspace.package]
authors = ["NLnet Labs <cascade@nlnetlabs.nl>"]
homepage = "https://nlnetlabs.nl/projects/cascade"
documentation = "https://cascade.docs.nlnetlabs.nl"
repository = "https://github.com/NLnetLabs/cascade"
license = "BSD-3-Clause"

version = "0.1.0-alpha5"
rust-version = "1.88"
edition = "2024"


[package]
name = "cascaded"
description = "A friendly DNSSEC signer."

authors.workspace = true
homepage.workspace = true
documentation.workspace = true
repository.workspace = true
license.workspace = true

version.workspace = true
rust-version.workspace = true
edition.workspace = true

exclude = [".github", ".gitignore"]
readme = "README.md"

default-run = "cascaded"


[profile.release]
panic = "abort"


# --- Dependencies -------------------------------------------------------------

[workspace.dependencies]

# 'camino' offers platform-independent, UTF-8-only paths.
#
# TODO: Maintenance?
[workspace.dependencies.camino]
version = "1.1.6"

# 'clap' is a command-line argument parsing library.
#
# TODO: Maintenance?
[workspace.dependencies.clap]
version = "4.5"

# 'domain' is a general-purpose library for DNS.
#
# It is maintained by us (NLnet Labs).
[workspace.dependencies.domain]
version = "0.11.1"
git = "https://github.com/NLnetLabs/domain"
branch = "main"

# 'domain-kmip' offers KMIP support for DNSSEC signatures.
#
# It is maintained by us (NLnet Labs).
[workspace.dependencies.domain-kmip]
git = "https://github.com/NLnetLabs/domain-kmip"
branch = "main"

# Cascade contains many performance-sensitive hashmaps and is not expected to
# be accessible to attackers.  'std's default hasher, which is slow but secure
# against HashDoS attacks, is not appropriate.  A performant, cryptographically
# insecure hash function is needed.
#
# TODO: Maintenance?
[workspace.dependencies.foldhash]
version = "0.2.0"

# 'jiff' is a general-purpose time library.
#
# TODO: Maintenance?
[workspace.dependencies.jiff]
version = "0.2.15"

# 'serde' is a framework for (de)serializing data.
#
# It is used throughout the Rust ecosystem and is maintained accordingly.
[workspace.dependencies.serde]
version = "1.0"

# 'toml' is a Serde-compatible library for working with TOML documents.
#
# It is used throughout the Rust ecosystem and is maintained accordingly.
[workspace.dependencies.toml]
version = "0.9"

# 'tokio' is an async runtime, particularly suited for networking.
#
# It is used throughout the Rust ecosystem and is maintained accordingly.
[workspace.dependencies.tokio]
version = "1.40"

# tracing and tracing-subscriber provide structured and async-compatible logging
# functionality. They are part of Tokio, a widely used and well maintained
# ecosystem of crates.
[workspace.dependencies.tracing]
version = "0.1.40"
[workspace.dependencies.tracing-subscriber]
version = "0.3.20"


[dependencies]
bytes              = "1.0"
daemonbase         = "0.1.4"
futures            = "0.3.17"
futures-util       = "0.3"
octseq             = { version = "0.5.2", default-features = false }
serde              = { workspace = true, features = ["derive", "rc"] }
axum               = { version = "0.8.4", default-features = false, features = ["http1", "http2", "query", "original-uri", "json", "tokio", "tracing"] }

# From Rotonda
crossbeam-utils    = "0.8"
serde_json         = "1.0"
serde_with         = "3"
url                = { version = "2.4", features = ["serde"] }
rayon = "1.10.0"

# Jiff is used by zone_signer for the DateCounter serial policy.
jiff.workspace = true

# 'ring' is used by 'domain' for various cryptographic operations.  There have
# been issues regarding its maintenance and a different solution will be needed
# eventually.
ring = "0.17.0"

# 'tempfile' is used to generate temporary files as part of atomic file writes.
tempfile = "3.21.0"

tracing.workspace = true
tracing-subscriber.workspace = true

# The 'lazy_static' library, which is pulled in by a subtle transitive
# dependency, is specified with a low minimal version.  The oldest allowed
# versions cause compilation errors with recent Rust compilers.  We manually
# increase the minimum version by registering it as a dependency, even though we
# don't use it ourselves.
#
# tracing-subscriber 0.3.20, feature "registry"
# depends on: sharded-slab ^0.1.4
# depends on: lazy_static ^1
#
# Ideally, this would be fixed in a new version of 'sharded-slab'.  But
# as of 2025-12-09, sharded-slab appears to be unmaintained. See
# <https://github.com/tokio-rs/tracing/issues/3436> for its use in
# 'tracing-subscriber'.
lazy_static = { version = "1.5" }

# support-color checks various environment variables and terminal settings for
# whether ANSI escape codes should be emitted. It is also used by `anstream`
# (and therefore `clap`).
supports-color = "3.0.2"

# `hostname` is a very popular crate to get the hostname of the current process.
# It is maintained  by Dirkjan Ochtman.
hostname = "0.4.1"

# `prometheus-client` is used for metrics and is maintained by the Prometheus
# organization.
prometheus-client = "0.24.0"

cascade-api = { path = "crates/api" }
cascade-cfg = { path = "crates/cfg" }
cascade-zonedata = { path = "crates/zonedata" }

# 'clap' is used for top-level configuration of the command-line interface (most
# of the work is done by 'cascade-cfg').
[dependencies.clap]
workspace = true
features = ["cargo"]

[dependencies.domain]
workspace = true
features = [
    "openssl",
    "tokio-stream",
    "tsig",
    "unstable-client-transport",
    "unstable-crypto-sign",
    "unstable-new",
    "unstable-server-transport",
    "unstable-sign",
    "unstable-zonetree",
]

[dependencies.domain-kmip]
workspace = true
features = []

[dependencies.tokio]
workspace = true
features = [
    "fs",
    "io-util",
    "macros",
    "net",
    "process",
    "rt",
    "rt-multi-thread",
    "signal",
    "sync",
    "test-util",
    "time",
    "tracing",
]

# 'foldhash' is used across Cascade as it is not attacker-facing.
[dependencies.foldhash]
workspace = true

# Cascade sometimes requires filesystem paths to be encoded within UTF-8 texts.
# To conveniently resolve the conversion between the OS filesystem encoding and
# UTF-8, 'camino' is used, which restricts filesystem paths to UTF-8.
[dependencies.camino]
workspace = true
features = ["serde1"]

# 'toml' is used to parse policies from TOML.
[dependencies.toml]
workspace = true


[dev-dependencies]
assert-json-diff = "2.0"


# --- Packaging ----------------------------------------------------------------

[package.metadata.deb]
assets = [
["target/release/cascade", "usr/bin/", "755"],
["target/release/cascaded", "usr/bin/","755"],
["README.md","usr/share/doc/cascade/","644"],
["doc/manual/build/man/cascade.1", "usr/share/man/man1/cascade.1", "644"],
["doc/manual/build/man/cascade-config.1", "usr/share/man/man1/cascade-config.1", "644"],
["doc/manual/build/man/cascade-health.1", "usr/share/man/man1/cascade-health.1", "644"],
["doc/manual/build/man/cascade-hsm.1", "usr/share/man/man1/cascade-hsm.1", "644"],
["doc/manual/build/man/cascade-tsig.1", "usr/share/man/man1/cascade-tsig.1", "644"],
["doc/manual/build/man/cascade-keyset.1", "usr/share/man/man1/cascade-keyset.1", "644"],
["doc/manual/build/man/cascade-policy.1", "usr/share/man/man1/cascade-policy.1", "644"],
["doc/manual/build/man/cascade-status.1", "usr/share/man/man1/cascade-status.1", "644"],
["doc/manual/build/man/cascade-template.1", "usr/share/man/man1/cascade-template.1", "644"],
["doc/manual/build/man/cascade-zone.1", "usr/share/man/man1/cascade-zone.1", "644"],
["doc/manual/build/man/cascaded.1", "usr/share/man/man1/cascaded.1", "644"],
["doc/manual/build/man/cascaded-config.toml.5", "usr/share/man/man5/cascaded-config.toml.5", "644"],
["doc/manual/build/man/cascaded-policy.toml.5", "usr/share/man/man5/cascaded-policy.toml.5", "644"],
["etc/config.system.toml", "etc/cascade/config.toml", "644"],
["pkg/common/service.preset","usr/lib/systemd/service-preset/50-cascaded.preset", "644"],
]
name = "cascade"
maintainer = "NLnet Labs <cascade@nlnetlabs.nl>"
license-file = ["LICENSE", "0"]
extended-description = """\
Cascade is a friendly DNSSEC signing solution, offering sensible defaults,
controllability, observability and flexibility.
"""
depends = "$auto, adduser, cascade-dnst"
recommends = "cascade-hsm-bridge"
section = "net"
priority = "optional"
maintainer-scripts = "pkg/debian"
changelog = "target/debian/changelog" # this will be generated by the pkg workflow
copyright = "Copyright (c) 2025, NLnet Labs. All rights reserved."
conf-files = ["/etc/cascade/config.toml"]
systemd-units = { unit-name = "cascaded", unit-scripts = "pkg/common", enable = false, usr-merge = true } # usr-merge is needed for Bookworm/Noble and later

[package.metadata.deb.variants.debian-buster]
systemd-units = { unit-name = "cascaded", unit-scripts = "pkg/common", enable = false, usr-merge = false }

[package.metadata.deb.variants.debian-bullseye]
systemd-units = { unit-name = "cascaded", unit-scripts = "pkg/common", enable = false, usr-merge = false }

[package.metadata.deb.variants.ubuntu-focal]
systemd-units = { unit-name = "cascaded", unit-scripts = "pkg/common", enable = false, usr-merge = false }

[package.metadata.deb.variants.ubuntu-jammy]
systemd-units = { unit-name = "cascaded", unit-scripts = "pkg/common", enable = false, usr-merge = false }

[package.metadata.generate-rpm]
# Use a shorter summary as rpmlint complains with E: summary-too-long.
# Use an initial capital letter to satisfy rpmlinlt which complains with W: summary-not-capitalized
summary = "Friendly DNSSEC signing solution"
assets = [
{ source = "target/release/cascade", dest = "/usr/bin/cascade", mode = "755" },
{ source = "target/release/cascaded", dest = "/usr/bin/cascaded", mode = "755" },
{ source = "target/rpm/cascaded.service", dest = "/usr/lib/systemd/system/cascaded.service", mode = "644" },
{ source = "target/rpm/cascaded.socket", dest = "/usr/lib/systemd/system/cascaded.socket", mode = "644" },
{ source = "README.md", dest = "/usr/share/doc/cascade/README.md", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade.1", dest = "/usr/share/man/man1/cascade.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-config.1", dest = "/usr/share/man/man1/cascade-config.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-health.1", dest = "/usr/share/man/man1/cascade-health.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-hsm.1", dest = "/usr/share/man/man1/cascade-hsm.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-tsig.1", dest = "/usr/share/man/man1/cascade-tsig.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-keyset.1", dest = "/usr/share/man/man1/cascade-keyset.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-policy.1", dest = "/usr/share/man/man1/cascade-policy.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-status.1", dest = "/usr/share/man/man1/cascade-status.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-template.1", dest = "/usr/share/man/man1/cascade-template.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascade-zone.1", dest = "/usr/share/man/man1/cascade-zone.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascaded.1", dest = "/usr/share/man/man1/cascaded.1", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascaded-config.toml.5", dest = "/usr/share/man/man5/cascaded-config.toml.5", mode = "644", doc = true },
{ source = "doc/manual/build/man/cascaded-policy.toml.5", dest = "/usr/share/man/man5/cascaded-policy.toml.5", mode = "644", doc = true },
{ source = "etc/config.system.toml", dest = "/etc/cascade/config.toml", mode = "644", config = true },
{ source = "pkg/common/service.preset", dest = "/usr/lib/systemd/system-preset/50-cascaded.preset", mode = "644" },
]

# ensure that the useradd tools are present by installing their respective packages
[package.metadata.generate-rpm.requires]
shadow-utils = "*"
cascade-dnst = "*"

[package.metadata.generate-rpm.recommends]
cascade-hsm-bridge = "*"