From 75bb1478fbb1c9cb6f25635023ea270f07259766 Mon Sep 17 00:00:00 2001
From: Ellie Huxtable <ellie@atuin.sh>
Date: Thu, 22 Jan 2026 16:12:12 -0800
Subject: chore(deps)!: update tls deps, remove built-in tls server support
 (#3091)

Update reqwest from 0.12 to 0.13 and remove the built-in TLS termination
from atuin-server. Users should use a reverse proxy (nginx, caddy,
traefik) for TLS/HTTPS support instead.

This removes:
- axum-server and rustls dependencies
- The [tls] configuration section
- The launch_with_tls function

Also updates metrics-exporter-prometheus from 0.17 to 0.18.

The reverse proxy approach is standard and provides better flexibility
for certificate management. I'd rather keep our server stack as minimal
as possible.

<!-- Thank you for making a PR! Bug fixes are always welcome, but if
you're adding a new feature or changing an existing one, we'd really
appreciate if you open an issue, post on the forum, or drop in on
Discord -->

## Checks
- [ ] I am happy for maintainers to push small adjustments to this PR,
to speed up the review cycle
- [ ] I have checked that there are no existing pull requests for the
same thing
---
 crates/atuin-server/server.toml | 5 -----
 1 file changed, 5 deletions(-)

(limited to 'crates/atuin-server/server.toml')

diff --git a/crates/atuin-server/server.toml b/crates/atuin-server/server.toml
index f02372d0..9ff95890 100644
--- a/crates/atuin-server/server.toml
+++ b/crates/atuin-server/server.toml
@@ -33,11 +33,6 @@
 # host = 127.0.0.1
 # port = 9001
 
-# [tls]
-# enable = false
-# cert_path = ""
-# pkey_path = ""
-
 ## Enable legacy sync v1 routes (history-based sync)
 ## Set to false to disable and use only the newer record-based sync
 # sync_v1_enabled = true
-- 
cgit v1.3.1