cmd/flatend: initial support for https

cmd/flatend/config.go

@@ -38,6 +38,8 @@ type ConfigHTTP struct {
 	Addr  string
 	Addrs []string
 
+	HTTPS bool
+
 	RedirectTrailingSlash *bool `toml:"redirect_trailing_slash"`
 	RedirectFixedPath     *bool `toml:"redirect_fixed_path"`
 
@@ -101,6 +103,13 @@ type ConfigRoute struct {
 	}
 }
 
+func (r ConfigRoute) GetServices() []string {
+	if r.Service == "" {
+		return r.Services
+	}
+	return []string{r.Service}
+}
+
 func (r ConfigRoute) Validate() error {
 	if r.Service != "" && r.Services != nil {
 		return errors.New("'service' and 'services' cannot both be non-nil at the same time")

cmd/flatend/main.go

@@ -1,9 +1,11 @@
 package main
 
 import (
+	"crypto/tls"
 	"errors"
 	"fmt"
 	"github.com/BurntSushi/toml"
+	"github.com/caddyserver/certmagic"
 	"github.com/julienschmidt/httprouter"
 	"github.com/lithdew/flatend"
 	"github.com/spf13/pflag"
@@ -69,6 +71,7 @@ func main() {
 
 		for _, route := range cfg.Routes {
 			fields := strings.Fields(route.Path)
+			services := route.GetServices()
 
 			var handler http.Handler
 
@@ -93,12 +96,7 @@ func main() {
 						http.ServeFile(w, r, static)
 					})
 				}
-			case route.Service != "" || len(route.Services) > 0:
-				services := route.Services
-				if route.Service != "" {
-					services = append(services, route.Service)
-				}
-
+			case len(services) > 0:
 				handler = HandleService(node, services)
 			}
 
@@ -123,17 +121,40 @@ func main() {
 			check(srv.Close())
 		}()
 
-		for _, addr := range cfg.GetAddrs() {
-			addr := addr
-			go func() {
-				ln, err := net.Listen("tcp", addr)
-				check(err)
+		addrs := cfg.GetAddrs()
+
+		if cfg.HTTPS {
+			magic := certmagic.NewDefault()
+			check(magic.ManageSync(addrs))
 
-				err = srv.Serve(ln)
-				if !errors.Is(err, http.ErrServerClosed) {
+			acme := certmagic.NewACMEManager(magic, certmagic.DefaultACME)
+			srv.Handler = acme.HTTPChallengeHandler(srv.Handler)
+
+			for _, addr := range addrs {
+				addr := addr
+				go func() {
+					ln, err := tls.Listen("tcp", addr, magic.TLSConfig())
 					check(err)
-				}
-			}()
+
+					err = srv.Serve(ln)
+					if !errors.Is(err, http.ErrServerClosed) {
+						check(err)
+					}
+				}()
+			}
+		} else {
+			for _, addr := range addrs {
+				addr := addr
+				go func() {
+					ln, err := net.Listen("tcp", addr)
+					check(err)
+
+					err = srv.Serve(ln)
+					if !errors.Is(err, http.ErrServerClosed) {
+						check(err)
+					}
+				}()
+			}
 		}
 	}
 

config.toml

@@ -1,5 +1,6 @@
 [[http]]
 addr = ":3000"
+https = false
 redirect_trailing_slash = true
 redirect_fixed_path = true
 

go.mod

@@ -4,6 +4,7 @@ go 1.14
 
 require (
 	github.com/BurntSushi/toml v0.3.1
+	github.com/caddyserver/certmagic v0.11.2
 	github.com/jpillora/backoff v1.0.0
 	github.com/julienschmidt/httprouter v1.3.0
 	github.com/lithdew/bytesutil v0.0.0-20200409052507-d98389230a59