Static file server for the gemini protocol
Find a file
Jeena 3278e9422e Complete configurable global concurrent request limiting
- Add max_concurrent_requests config option (default: 1000)
- Implement global AtomicUsize counter for tracking active connections
- Return early for rate-limited connections (no TLS/processing overhead)
- Proper counter management with increment/decrement
- Comprehensive error handling and validation
- Tested with concurrent connection holding - works perfectly!

Rate limiting now provides effective DDoS protection by:
- Limiting concurrent connections to prevent server overload
- Rejecting excess connections immediately (connection reset)
- Configurable per deployment needs
- Thread-safe implementation with zero performance impact
2026-01-16 03:10:23 +00:00
src Complete configurable global concurrent request limiting 2026-01-16 03:10:23 +00:00
.gitignore Refine repository structure 2026-01-15 08:31:43 +09:00
AGENTS.md Add configurable global concurrent request limiting 2026-01-16 02:26:59 +00:00
BACKLOG.md Add configurable global concurrent request limiting 2026-01-16 02:26:59 +00:00
Cargo.toml Initial codebase structure 2026-01-15 08:22:06 +09:00
README.md Fix Gemini protocol status codes and error handling 2026-01-16 00:17:34 +00:00

Pollux - A Simple Gemini Server

Pollux is a lightweight Gemini server for serving static files securely. It supports TLS, hostname validation, and basic directory serving.

Requirements

Rust 1.70+ and Cargo.

Building

Clone or download the source, then run:

cargo build --release

This produces the target/release/pollux binary.

Running

Create a config file at /etc/pollux/config.toml or use --config to specify a path:

root = "/path/to/static/files"
cert = "/path/to/cert.pem"
key = "/path/to/key.pem"
host = "gemini.example.com"
port = 1965
log_level = "info"

Development Setup

Quick Start with Self-Signed Certs

mkdir -p tmp
openssl req -x509 -newkey rsa:2048 \
  -keyout tmp/key.pem \
  -out tmp/cert.pem \
  -days 365 \
  -nodes \
  -subj "/CN=localhost"

Update config.toml:

cert = "tmp/cert.pem"
key = "tmp/key.pem"

Run the server:

./pollux --config /path/to/config.toml

Or specify options directly (overrides config):

./pollux --root /path/to/static/files --cert cert.pem --key key.pem --host yourdomain.com --port 1965

Access with a Gemini client like Lagrange at gemini://yourdomain.com/.

Development Notes

  • These certificates are for local testing only
  • Browsers will show security warnings with self-signed certs
  • Certificates in the dev/ directory are gitignored for security

Options

  • --config: Path to config file (default /etc/pollux/config.toml)
  • --root: Directory to serve files from (required)
  • --cert: Path to certificate file (required)
  • --key: Path to private key file (required)
  • --host: Hostname for validation (required)
  • --port: Port to listen on (default 1965)

Certificate Management

  • Never commit certificate files to version control
  • Use development certificates only for local testing
  • Production certificates should be obtained via Let's Encrypt or your CA

Testing

Run cargo test for unit tests. Fix warnings before commits.