mirror of
https://github.com/netbirdio/netbird.git
synced 2024-10-05 17:52:09 +02:00
86a66c6202
Right now Signal Service runs the Let'sEncrypt manager on port 80 and a gRPC server on port 10000. There are two separate listeners. This PR combines these listeners into one with a cmux lib. The gRPC server runs on either 443 with TLS or 80 without TLS. Let's Encrypt manager always runs on port 80.
31 lines
790 B
Go
31 lines
790 B
Go
package encryption
|
|
|
|
import (
|
|
log "github.com/sirupsen/logrus"
|
|
"golang.org/x/crypto/acme/autocert"
|
|
"os"
|
|
"path/filepath"
|
|
)
|
|
|
|
// CreateCertManager wraps common logic of generating Let's encrypt certificate.
|
|
func CreateCertManager(datadir string, letsencryptDomain string) (*autocert.Manager, error) {
|
|
certDir := filepath.Join(datadir, "letsencrypt")
|
|
|
|
if _, err := os.Stat(certDir); os.IsNotExist(err) {
|
|
err = os.MkdirAll(certDir, os.ModeDir)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
log.Infof("running with LetsEncrypt (%s). Cert will be stored in %s", letsencryptDomain, certDir)
|
|
|
|
certManager := &autocert.Manager{
|
|
Prompt: autocert.AcceptTOS,
|
|
Cache: autocert.DirCache(certDir),
|
|
HostPolicy: autocert.HostWhitelist(letsencryptDomain),
|
|
}
|
|
|
|
return certManager, nil
|
|
}
|