openidec

commit 0cf1f11706f6ea1db32c3d143a49be010c0986ca
parent 7288779664358c40c63358fe649edebf24203442
Author: Peter Kosyh <p.kosyh@gmail.com>
Date:   Thu, 10 Sep 2020 18:29:51 +0100

reverse proxy added as contrib

Diffstat:
A
contrib/secure/main.go
 | 
67
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 file changed, 67 insertions(+), 0 deletions(-)
diff --git a/contrib/secure/main.go b/contrib/secure/main.go
@@ -0,0 +1,67 @@
+// some code taken from https://github.com/yi-jiayu/secure
+// secure is a super simple TLS termination proxy
+package main
+
+import (
+	"flag"
+	"fmt"
+	"log"
+	"net/http"
+	"net/http/httputil"
+	"net/url"
+	"os"
+	"path/filepath"
+	"golang.org/x/crypto/acme/autocert"
+)
+
+var (
+	upstream string
+	addr     string
+)
+
+func init() {
+	flag.StringVar(&addr, "addr", ":443", "listen address")
+
+	flag.Usage = func() {
+		fmt.Fprintf(flag.CommandLine.Output(),
+			"usage: %s [-addr host:port] upstream\n",
+			filepath.Base(os.Args[0]))
+		flag.PrintDefaults()
+		fmt.Fprintln(flag.CommandLine.Output(), "  upstream string\n    \tupstream url")
+	}
+}
+
+func main() {
+	flag.Parse()
+
+	if flag.NArg() == 1 {
+		upstream = flag.Arg(0)
+	} else {
+		flag.Usage()
+		os.Exit(2)
+	}
+
+	u, err := url.Parse(upstream)
+	if err != nil {
+		fmt.Printf("invalid upstream address: %s", err)
+		os.Exit(1)
+	}
+
+	rp := httputil.NewSingleHostReverseProxy(u)
+
+	certManager := autocert.Manager{
+		Prompt:     autocert.AcceptTOS,
+		Cache:      autocert.DirCache("certs"),
+	}
+
+	tlsConfig := certManager.TLSConfig()
+	srv := http.Server{
+		Handler: rp,
+		TLSConfig: tlsConfig,
+		Addr: addr,
+	}
+
+	log.Printf("listen-addr=%s upstream-url=%s", srv.Addr, u.String())
+
+	srv.ListenAndServeTLS("", "")
+}