Add: Notus address configuration

Kraemii · Kraemii · commit e5a8101f6dc2 · 2026-03-17T11:28:32.000+01:00
In preparation for the notus migration to skiron, this adds a config
to use an external API to get notus results.
diff --git a/rust/examples/openvasd/config.example.toml b/rust/examples/openvasd/config.example.toml
@@ -18,6 +18,8 @@ check_interval = "3600s"
 products_path = "/var/lib/notus/products/"
 # path to the notus advisories feed. This is required for the /vts endpoint
 advisories_path = "/var/lib/notus/advisories/"
+# Address to reach notus on. If not set, internal notus implementation is used.
+# address = "127.0.0.1:3001"
 
 [endpoints]
 # Enables GET /scans endpoint
@@ -102,4 +104,3 @@ max_scanning = 10
 batch_size = 2
 # How long openvasd should pause before retrying
 retry_timeout = "1s"
-
diff --git a/rust/src/openvasd/config/mod.rs b/rust/src/openvasd/config/mod.rs
@@ -36,6 +36,7 @@ pub struct Feed {
 pub struct Notus {
     pub products_path: PathBuf,
     pub advisories_path: PathBuf,
+    pub address: Option<SocketAddr>,
 }
 
 #[derive(Debug, Clone, serde::Serialize, serde::Deserialize)]
@@ -139,6 +140,7 @@ impl Default for Notus {
         Notus {
             products_path: PathBuf::from("/var/lib/notus/products"),
             advisories_path: PathBuf::from("/var/lib/notus/advisories"),
+            address: None,
         }
     }
 }
@@ -437,6 +439,14 @@ impl Config {
                     .value_parser(clap::builder::PathBufValueParser::new())
                     .action(ArgAction::Set)
                     .help("Path containing the Notus products directory"))
+            .arg(
+                clap::Arg::new("notus-address")
+                    .env("NOTUS_ADDRESS")
+                    .long("notus-address")
+                    .value_name("IP:PORT")
+                    .value_parser(clap::value_parser!(SocketAddr))
+                    .action(ArgAction::Set)
+                    .help("the address to reach notus on"))
             .arg(
                 clap::Arg::new("redis-url")
                     .long("redis-url")
@@ -658,6 +668,9 @@ impl Config {
         if let Some(path) = cmds.get_one::<PathBuf>("notus-advisories") {
             config.notus.advisories_path.clone_from(path);
         }
+        if let Some(address) = cmds.get_one::<SocketAddr>("notus-address") {
+            config.notus.address = Some(*address);
+        }
         if let Some(_path) = cmds.get_one::<String>("redis-url") {
             // is actually ignored as on scanner openvas the redis-url of openvas is used
         }
diff --git a/rust/src/openvasd/notus/mod.rs b/rust/src/openvasd/notus/mod.rs
@@ -162,6 +162,7 @@ mod tests {
         let notus = crate::config::Notus {
             advisories_path,
             products_path,
+            address: None,
         };
 
         Config {
diff --git a/rust/src/openvasd/scans/mod.rs b/rust/src/openvasd/scans/mod.rs
@@ -511,6 +511,7 @@ pub mod tests {
         let notus = crate::config::Notus {
             advisories_path,
             products_path,
+            address: None,
         };
         let scanner = crate::config::Scanner {
             scanner_type: crate::config::ScannerType::Openvasd,
