From 75bb1478fbb1c9cb6f25635023ea270f07259766 Mon Sep 17 00:00:00 2001
From: Ellie Huxtable <ellie@atuin.sh>
Date: Thu, 22 Jan 2026 16:12:12 -0800
Subject: chore(deps)!: update tls deps, remove built-in tls server support
 (#3091)

Update reqwest from 0.12 to 0.13 and remove the built-in TLS termination
from atuin-server. Users should use a reverse proxy (nginx, caddy,
traefik) for TLS/HTTPS support instead.

This removes:
- axum-server and rustls dependencies
- The [tls] configuration section
- The launch_with_tls function

Also updates metrics-exporter-prometheus from 0.17 to 0.18.

The reverse proxy approach is standard and provides better flexibility
for certificate management. I'd rather keep our server stack as minimal
as possible.

<!-- Thank you for making a PR! Bug fixes are always welcome, but if
you're adding a new feature or changing an existing one, we'd really
appreciate if you open an issue, post on the forum, or drop in on
Discord -->

## Checks
- [ ] I am happy for maintainers to push small adjustments to this PR,
to speed up the review cycle
- [ ] I have checked that there are no existing pull requests for the
same thing
---
 Cargo.toml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'Cargo.toml')

diff --git a/Cargo.toml b/Cargo.toml
index 40b0811e..ba706344 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -51,8 +51,8 @@ version = "0.3"
 features = ["ansi", "fmt", "registry", "env-filter"]
 
 [workspace.dependencies.reqwest]
-version = "0.12"
-features = ["json", "rustls-tls-native-roots"]
+version = "0.13"
+features = ["json", "rustls"]
 default-features = false
 
 [workspace.dependencies.sqlx]
-- 
cgit v1.3.1