From d0132706cd9b5bd0c6df5507cb42bcbade86f28b Mon Sep 17 00:00:00 2001
From: Jason Volk <jason@zemos.net>
Date: Fri, 28 Mar 2025 23:34:42 +0000
Subject: [PATCH] add --read-only and --maintenance program option

Signed-off-by: Jason Volk <jason@zemos.net>
---
 Cargo.toml       |  1 +
 src/main/clap.rs | 17 +++++++++++++++++
 2 files changed, 18 insertions(+)

diff --git a/Cargo.toml b/Cargo.toml
index db55b9b8..8b49c3b8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -892,6 +892,7 @@ needless_continue = { level = "allow", priority = 1 }
 no_effect_underscore_binding = { level = "allow", priority = 1 }
 similar_names = { level = "allow", priority = 1 }
 single_match_else = { level = "allow", priority = 1 }
+struct_excessive_bools = { level = "allow", priority = 1 }
 struct_field_names = { level = "allow", priority = 1 }
 unnecessary_wraps = { level = "allow", priority = 1 }
 unused_async = { level = "allow", priority = 1 }
diff --git a/src/main/clap.rs b/src/main/clap.rs
index 35a7ea41..707a1c76 100644
--- a/src/main/clap.rs
+++ b/src/main/clap.rs
@@ -27,6 +27,14 @@ pub(crate) struct Args {
 	#[arg(long, short('O'))]
 	pub(crate) option: Vec<String>,
 
+	/// Run in a stricter read-only --maintenance mode.
+	#[arg(long)]
+	pub(crate) read_only: bool,
+
+	/// Run in maintenance mode while refusing connections.
+	#[arg(long)]
+	pub(crate) maintenance: bool,
+
 	#[cfg(feature = "console")]
 	/// Activate admin command console automatically after startup.
 	#[arg(long, num_args(0))]
@@ -121,6 +129,15 @@ pub(super) fn parse() -> Args { Args::parse() }
 
 /// Synthesize any command line options with configuration file options.
 pub(crate) fn update(mut config: Figment, args: &Args) -> Result<Figment> {
+	if args.read_only {
+		config = config.join(("rocksdb_read_only", true));
+	}
+
+	if args.maintenance || args.read_only {
+		config = config.join(("startup_netburst", false));
+		config = config.join(("listening", false));
+	}
+
 	#[cfg(feature = "console")]
 	// Indicate the admin console should be spawned automatically if the
 	// configuration file hasn't already.