Run a durable registry

Configure explicitly

mars-server accepts --config/MARS_CONFIG, --listen-addr/MARS_LISTEN_ADDR, --database-url/DATABASE_URL, --allow-memory-store/MARS_ALLOW_MEMORY_STORE, and --metrics-addr/MARS_METRICS_ADDR. Configuration files use the typed TOML configuration shape.

Set MARS_ENV=production deliberately. The production validation layer checks storage, live adapter/trust configuration, protected credentials, and enabled federation/anchor dependencies. Defaults suitable for development are not a production configuration.

PostgreSQL

Use the postgres feature and a durable database. Startup connects/migrates the store, verifies immutable audit/event chains, and checks anchor outbox state. Memory storage is an explicit development-only opt-in and loses state on restart. Preserve authentication durability alongside entry durability.

Search cursor keys

MARS_SEARCH_CURSOR_HMAC_KEY must be valid unpadded base64url secret material meeting the configured size requirements. Provision it through protected secret storage. Rotation must retain the supported previous-key window while existing cursors expire. See typed search configuration for exact options and validation.

Readiness and observability

GET /v1/health is public. GET /v1/health/deep requires admin capability and checks dependencies. Prometheus metrics bind separately (default 0.0.0.0:9090); restrict that listener to your observability network. Configure logs to exclude session tokens and signing material.

Release features

Production builds combine postgres, sigil, and prod. prod rejects mock/test anchor combinations. These are source build contracts; the documentation build does not certify a backend release. Recovery covers ledger verification and backups.

Source authority

This page describes the checked-in implementation, not the availability of a public registry.

mars-server/src/main.rs
mars-server/src/production.rs
mars-server/src/config.rs
mars-server/Cargo.toml
mars-server/src/store/migrations.rs