v0.32.5

src/main/admin_runtime.rs

@@ -146,7 +146,10 @@ async fn run(
     }
     let renewal_observations = store.load_certificate_renewals().await?;
     let geoip_format = snapshot.envelope.config.geoip_updates.format;
-    let geoip = match rust_proxy::geoip::Database::load_format(&data_dir.join("geoip"), geoip_format) {
+    let geoip = match rust_proxy::geoip::Database::load_format(
+        &data_dir.join("geoip"),
+        geoip_format,
+    ) {
         Ok(database) => std::sync::Arc::new(database),
         Err(error) => {
             tracing::warn!(%error, "GeoIP country database unavailable; country allow lists fail closed");
@@ -258,6 +261,7 @@ async fn run(
     // socket has bound successfully so DNS/network failures can never obscure or
     // interfere with listener startup failures.
     state.start_geoip_updates();
+    state.start_dns_acl_updates();
     state.start_update_check(update_check);
     let shutdown = state.shutdown.clone();
     let grace = Duration::from_secs(options.shutdown_timeout_secs);
@@ -432,7 +436,10 @@ async fn run(
         grace
     };
     if managed_update {
-        tracing::info!(budget_seconds = cache_flush_budget.as_secs(), "managed-update hot-to-cold cache handoff started");
+        tracing::info!(
+            budget_seconds = cache_flush_budget.as_secs(),
+            "managed-update hot-to-cold cache handoff started"
+        );
     }
     let flush_result = if managed_update {
         tokio::time::timeout(
@@ -444,10 +451,9 @@ async fn run(
         tokio::time::timeout(cache_flush_budget, state.cache.flush_hot_to_cold()).await
     };
     match flush_result {
-        Ok(moved) if managed_update => tracing::info!(
-            moved,
-            "managed-update hot-to-cold cache handoff completed"
-        ),
+        Ok(moved) if managed_update => {
+            tracing::info!(moved, "managed-update hot-to-cold cache handoff completed")
+        }
         Ok(moved) if moved > 0 => tracing::info!(
             moved,
             "flushed hot cache objects to cold storage before shutdown"