-
Notifications
You must be signed in to change notification settings - Fork 40
/
autotls.go
114 lines (97 loc) · 2.62 KB
/
autotls.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
package autotls
import (
"context"
"crypto/tls"
"log"
"net/http"
"time"
"golang.org/x/crypto/acme/autocert"
"golang.org/x/sync/errgroup"
)
type tlsContextKey string
var (
ctxKey = tlsContextKey("autls")
todoCtx = context.WithValue(context.Background(), ctxKey, "done")
ReadHeaderTimeout = 3 * time.Second
)
func run(ctx context.Context, r http.Handler, domain ...string) error {
var g errgroup.Group
s1 := &http.Server{
Addr: ":http",
Handler: http.HandlerFunc(redirect),
ReadHeaderTimeout: ReadHeaderTimeout,
}
s2 := &http.Server{
Handler: r,
ReadHeaderTimeout: ReadHeaderTimeout,
}
g.Go(func() error {
return s1.ListenAndServe()
})
g.Go(func() error {
return s2.Serve(autocert.NewListener(domain...))
})
g.Go(func() error {
if v := ctx.Value(ctxKey); v != nil {
return nil
}
<-ctx.Done()
var gShutdown errgroup.Group
gShutdown.Go(func() error {
return s1.Shutdown(context.Background())
})
gShutdown.Go(func() error {
return s2.Shutdown(context.Background())
})
return gShutdown.Wait()
})
return g.Wait()
}
// Run support 1-line LetsEncrypt HTTPS servers with graceful shutdown
func RunWithContext(ctx context.Context, r http.Handler, domain ...string) error {
return run(ctx, r, domain...)
}
// Run support 1-line LetsEncrypt HTTPS servers
func Run(r http.Handler, domain ...string) error {
return run(todoCtx, r, domain...)
}
// RunWithManager support custom autocert manager
func RunWithManager(r http.Handler, m *autocert.Manager) error {
return RunWithManagerAndTLSConfig(r, m, m.TLSConfig())
}
// RunWithManagerAndTLSConfig support custom autocert manager and tls.Config
func RunWithManagerAndTLSConfig(r http.Handler, m *autocert.Manager, tlsc *tls.Config) error {
var g errgroup.Group
if m.Cache == nil {
var e error
m.Cache, e = getCacheDir()
if e != nil {
log.Println(e)
}
}
defaultTLSConfig := m.TLSConfig()
tlsc.GetCertificate = defaultTLSConfig.GetCertificate
tlsc.NextProtos = defaultTLSConfig.NextProtos
s := &http.Server{
Addr: ":https",
TLSConfig: tlsc,
Handler: r,
ReadHeaderTimeout: ReadHeaderTimeout,
}
g.Go(func() error {
s := &http.Server{
Addr: ":http",
Handler: m.HTTPHandler(http.HandlerFunc(redirect)),
ReadHeaderTimeout: ReadHeaderTimeout,
}
return s.ListenAndServe()
})
g.Go(func() error {
return s.ListenAndServeTLS("", "")
})
return g.Wait()
}
func redirect(w http.ResponseWriter, req *http.Request) {
target := "https://" + req.Host + req.RequestURI
http.Redirect(w, req, target, http.StatusMovedPermanently)
}