1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
package main
import (
"crypto/tls"
"flag"
"fmt"
"log"
"net/http"
"strings"
"sync"
)
var listenHTTP = flag.String("listen-http", ":80", "The address to listen for HTTP requests")
var listenHTTPS = flag.String("listen-https", "", "The address to listen for HTTPS requests")
var pagesDomain = flag.String("pages-domain", "gitlab-example.com", "The domain to serve static pages")
var pagesRootCert = flag.String("root-cert", "", "The default certificate to serve static pages")
var pagesRootKey = flag.String("root-key", "", "The default certificate to serve static pages")
var serverHTTP = flag.Bool("serve-http", true, "Serve the pages under HTTP")
var http2proto = flag.Bool("http2", true, "Enable HTTP2 support")
var pagesRoot = flag.String("pages-root", "shared/pages", "The directory where pages are stored")
type theApp struct {
domains domains
}
func (a *theApp) ServeTLS(ch *tls.ClientHelloInfo) (*tls.Certificate, error) {
if ch.ServerName == "" {
return nil, nil
}
host := strings.ToLower(ch.ServerName)
if domain, ok := a.domains[host]; ok {
tls, _ := domain.ensureCertificate()
return tls, nil
}
return nil, nil
}
func (a *theApp) ServeHTTP(ww http.ResponseWriter, r *http.Request) {
w := newLoggingResponseWriter(ww)
defer w.Log(r)
// Add auto redirect
if r.TLS == nil && !*serverHTTP {
u := *r.URL
u.Scheme = "https"
u.Host = r.Host
u.User = nil
http.Redirect(&w, r, u.String(), 307)
return
}
host := strings.ToLower(r.Host)
domain, ok := a.domains[host]
if !ok {
http.NotFound(&w, r)
return
}
// Serve static file
domain.ServeHTTP(&w, r)
}
func (a *theApp) UpdateDomains(domains domains) {
fmt.Printf("Domains: %v", domains)
a.domains = domains
}
func main() {
var wg sync.WaitGroup
var app theApp
flag.Parse()
// Listen for HTTP
if *listenHTTP != "" {
wg.Add(1)
go func() {
defer wg.Done()
err := ListenAndServe(*listenHTTP, &app)
if err != nil {
log.Fatal(err)
}
}()
}
// Listen for HTTPS
if *listenHTTPS != "" {
wg.Add(1)
go func() {
defer wg.Done()
err := ListenAndServeTLS(*listenHTTPS, *pagesRootCert, *pagesRootKey, &app)
if err != nil {
log.Fatal(err)
}
}()
}
go watchDomains(app.UpdateDomains)
wg.Wait()
}
|
