mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-01-24 13:58:12 -05:00
b24d126b30
TLS for the services can be configure by setting the "OCIS_HTTP_TLS_ENABLED", "OCIS_HTTP_TLS_CERTIFICATE" and "OCIS_HTTP_TLS_KEY" environment variables. Currently the ocis proxy is this only service that directly accesses backend services. It determines whether to use TLS or not by looking a the new registry metadata "use_tls". As specific CA Cert for certificate verification can be set with the "PROXY_HTTPS_CACERT" environment variable.
85 lines
2.2 KiB
Go
85 lines
2.2 KiB
Go
package http
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
|
|
chimiddleware "github.com/go-chi/chi/v5/middleware"
|
|
pkgcrypto "github.com/owncloud/ocis/v2/ocis-pkg/crypto"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/middleware"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/service/http"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/shared"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/version"
|
|
svc "github.com/owncloud/ocis/v2/services/idp/pkg/service/v0"
|
|
"go-micro.dev/v4"
|
|
)
|
|
|
|
// Server initializes the http service and server.
|
|
func Server(opts ...Option) (http.Service, error) {
|
|
options := newOptions(opts...)
|
|
|
|
if options.Config.HTTP.TLS {
|
|
_, certErr := os.Stat(options.Config.HTTP.TLSCert)
|
|
_, keyErr := os.Stat(options.Config.HTTP.TLSKey)
|
|
|
|
if os.IsNotExist(certErr) || os.IsNotExist(keyErr) {
|
|
options.Logger.Info().Msgf("Generating certs")
|
|
if err := pkgcrypto.GenCert(options.Config.HTTP.TLSCert, options.Config.HTTP.TLSKey, options.Logger); err != nil {
|
|
options.Logger.Fatal().Err(err).Msg("Could not setup TLS")
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
}
|
|
|
|
service, err := http.NewService(
|
|
http.Logger(options.Logger),
|
|
http.Namespace(options.Config.HTTP.Namespace),
|
|
http.Name(options.Config.Service.Name),
|
|
http.Version(version.GetString()),
|
|
http.Address(options.Config.HTTP.Addr),
|
|
http.Context(options.Context),
|
|
http.Flags(options.Flags...),
|
|
http.TLSConfig(shared.HTTPServiceTLS{
|
|
Enabled: options.Config.HTTP.TLS,
|
|
Cert: options.Config.HTTP.TLSCert,
|
|
Key: options.Config.HTTP.TLSKey,
|
|
}),
|
|
)
|
|
if err != nil {
|
|
options.Logger.Error().
|
|
Err(err).
|
|
Msg("Error initializing http service")
|
|
return http.Service{}, fmt.Errorf("could not initialize http service: %w", err)
|
|
}
|
|
|
|
handle := svc.NewService(
|
|
svc.Logger(options.Logger),
|
|
svc.Config(options.Config),
|
|
svc.Middleware(
|
|
chimiddleware.RealIP,
|
|
chimiddleware.RequestID,
|
|
middleware.TraceContext,
|
|
middleware.NoCache,
|
|
middleware.Secure,
|
|
middleware.Version(
|
|
options.Config.Service.Name,
|
|
version.GetString(),
|
|
),
|
|
middleware.Logger(
|
|
options.Logger,
|
|
),
|
|
),
|
|
)
|
|
|
|
{
|
|
handle = svc.NewInstrument(handle, options.Metrics)
|
|
handle = svc.NewLoggingHandler(handle, options.Logger)
|
|
}
|
|
|
|
if err := micro.RegisterHandler(service.Server(), handle); err != nil {
|
|
return http.Service{}, err
|
|
}
|
|
|
|
return service, nil
|
|
}
|