mirror of
https://github.com/1f349/violet.git
synced 2024-11-22 03:11:44 +00:00
96 lines
2.6 KiB
Go
96 lines
2.6 KiB
Go
package servers
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/MrMelon54/violet/utils"
|
|
"github.com/julienschmidt/httprouter"
|
|
"log"
|
|
"net/http"
|
|
"net/url"
|
|
"time"
|
|
)
|
|
|
|
// NewHttpServer creates and runs a http server containing the public http
|
|
// endpoints for the reverse proxy.
|
|
//
|
|
// `/.well-known/acme-challenge/{token}` is used for outputting answers for
|
|
// acme challenges, this is used for Lets Encrypt HTTP verification.
|
|
func NewHttpServer(conf *Conf) *http.Server {
|
|
r := httprouter.New()
|
|
var secureExtend string
|
|
_, httpsPort, ok := utils.SplitDomainPort(conf.HttpsListen, 443)
|
|
if !ok {
|
|
httpsPort = 443
|
|
}
|
|
if httpsPort != 443 {
|
|
secureExtend = fmt.Sprintf(":%d", httpsPort)
|
|
}
|
|
|
|
// Endpoint for acme challenge outputs
|
|
r.GET("/.well-known/acme-challenge/{key}", func(rw http.ResponseWriter, req *http.Request, params httprouter.Params) {
|
|
if h, ok := utils.GetDomainWithoutPort(req.Host); ok {
|
|
// check if the host is valid
|
|
if !conf.Domains.IsValid(req.Host) {
|
|
http.Error(rw, fmt.Sprintf("%d %s\n", 420, "Invalid host"), 420)
|
|
return
|
|
}
|
|
|
|
// check if the key is valid
|
|
key := params.ByName("key")
|
|
if key == "" {
|
|
rw.WriteHeader(http.StatusNotFound)
|
|
return
|
|
}
|
|
|
|
// prepare for executing query
|
|
prepare, err := conf.DB.Prepare("select value from acme_challenges limit 1 where domain = ? and key = ?")
|
|
if err != nil {
|
|
utils.RespondHttpStatus(rw, http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
// query the row and extract the value
|
|
row := prepare.QueryRow(h, key)
|
|
var value string
|
|
err = row.Scan(&value)
|
|
if err != nil {
|
|
utils.RespondHttpStatus(rw, http.StatusInternalServerError)
|
|
return
|
|
}
|
|
|
|
// output response
|
|
rw.WriteHeader(http.StatusOK)
|
|
_, _ = rw.Write([]byte(value))
|
|
}
|
|
rw.WriteHeader(http.StatusNotFound)
|
|
})
|
|
|
|
// All other paths lead here and are forwarded to HTTPS
|
|
r.NotFound = http.HandlerFunc(func(rw http.ResponseWriter, req *http.Request) {
|
|
if h, ok := utils.GetDomainWithoutPort(req.Host); ok {
|
|
u := &url.URL{
|
|
Scheme: "https",
|
|
Host: h + secureExtend,
|
|
Path: req.URL.Path,
|
|
RawPath: req.URL.RawPath,
|
|
RawQuery: req.URL.RawQuery,
|
|
}
|
|
utils.FastRedirect(rw, req, u.String(), http.StatusPermanentRedirect)
|
|
}
|
|
})
|
|
|
|
// Create and run http server
|
|
s := &http.Server{
|
|
Addr: conf.HttpListen,
|
|
Handler: r,
|
|
ReadTimeout: time.Minute,
|
|
ReadHeaderTimeout: time.Minute,
|
|
WriteTimeout: time.Minute,
|
|
IdleTimeout: time.Minute,
|
|
MaxHeaderBytes: 2500,
|
|
}
|
|
log.Printf("[HTTP] Starting HTTP server on: '%s'\n", s.Addr)
|
|
go utils.RunBackgroundHttp("HTTP", s)
|
|
return s
|
|
}
|