source: code/trunk/cmd/soju/main.go@ 455

Last change on this file since 455 was 455, checked in by contact, 4 years ago

Add irc to ALPN protocols

The new ALPN token has been approved [1]. We can start using it now.

[1]: https://mailarchive.ietf.org/arch/msg/tls-reg-review/i8YyT82XUtEgR-oXMG3sbyWYT8E/

File size: 4.6 KB
Line 
1package main
2
3import (
4 "crypto/tls"
5 "flag"
6 "log"
7 "net"
8 "net/http"
9 "net/url"
10 "os"
11 "os/signal"
12 "strings"
13 "syscall"
14
15 "github.com/pires/go-proxyproto"
16
17 "git.sr.ht/~emersion/soju"
18 "git.sr.ht/~emersion/soju/config"
19)
20
21func main() {
22 var listen, configPath string
23 var debug bool
24 flag.StringVar(&listen, "listen", "", "listening address")
25 flag.StringVar(&configPath, "config", "", "path to configuration file")
26 flag.BoolVar(&debug, "debug", false, "enable debug logging")
27 flag.Parse()
28
29 var cfg *config.Server
30 if configPath != "" {
31 var err error
32 cfg, err = config.Load(configPath)
33 if err != nil {
34 log.Fatalf("failed to load config file: %v", err)
35 }
36 } else {
37 cfg = config.Defaults()
38 }
39
40 if listen != "" {
41 cfg.Listen = append(cfg.Listen, listen)
42 }
43 if len(cfg.Listen) == 0 {
44 cfg.Listen = []string{":6697"}
45 }
46
47 db, err := soju.OpenSQLDB(cfg.SQLDriver, cfg.SQLSource)
48 if err != nil {
49 log.Fatalf("failed to open database: %v", err)
50 }
51
52 var tlsCfg *tls.Config
53 if cfg.TLS != nil {
54 cert, err := tls.LoadX509KeyPair(cfg.TLS.CertPath, cfg.TLS.KeyPath)
55 if err != nil {
56 log.Fatalf("failed to load TLS certificate and key: %v", err)
57 }
58 tlsCfg = &tls.Config{
59 NextProtos: []string{"irc"},
60 Certificates: []tls.Certificate{cert},
61 }
62 }
63
64 srv := soju.NewServer(db)
65 // TODO: load from config/DB
66 srv.Hostname = cfg.Hostname
67 srv.LogPath = cfg.LogPath
68 srv.HTTPOrigins = cfg.HTTPOrigins
69 srv.AcceptProxyIPs = cfg.AcceptProxyIPs
70 srv.Debug = debug
71
72 for _, listen := range cfg.Listen {
73 listenURI := listen
74 if !strings.Contains(listenURI, ":/") {
75 // This is a raw domain name, make it an URL with an empty scheme
76 listenURI = "//" + listenURI
77 }
78 u, err := url.Parse(listenURI)
79 if err != nil {
80 log.Fatalf("failed to parse listen URI %q: %v", listen, err)
81 }
82
83 switch u.Scheme {
84 case "ircs", "":
85 if tlsCfg == nil {
86 log.Fatalf("failed to listen on %q: missing TLS configuration", listen)
87 }
88 host := u.Host
89 if _, _, err := net.SplitHostPort(host); err != nil {
90 host = host + ":6697"
91 }
92 ln, err := tls.Listen("tcp", host, tlsCfg)
93 if err != nil {
94 log.Fatalf("failed to start TLS listener on %q: %v", listen, err)
95 }
96 ln = proxyProtoListener(ln, srv)
97 go func() {
98 if err := srv.Serve(ln); err != nil {
99 log.Printf("serving %q: %v", listen, err)
100 }
101 }()
102 case "irc+insecure":
103 host := u.Host
104 if _, _, err := net.SplitHostPort(host); err != nil {
105 host = host + ":6667"
106 }
107 ln, err := net.Listen("tcp", host)
108 if err != nil {
109 log.Fatalf("failed to start listener on %q: %v", listen, err)
110 }
111 ln = proxyProtoListener(ln, srv)
112 go func() {
113 if err := srv.Serve(ln); err != nil {
114 log.Printf("serving %q: %v", listen, err)
115 }
116 }()
117 case "wss":
118 addr := u.Host
119 if _, _, err := net.SplitHostPort(addr); err != nil {
120 addr = addr + ":https"
121 }
122 httpSrv := http.Server{
123 Addr: addr,
124 TLSConfig: tlsCfg,
125 Handler: srv,
126 }
127 go func() {
128 if err := httpSrv.ListenAndServeTLS("", ""); err != nil {
129 log.Fatalf("serving %q: %v", listen, err)
130 }
131 }()
132 case "ws+insecure":
133 addr := u.Host
134 if _, _, err := net.SplitHostPort(addr); err != nil {
135 addr = addr + ":http"
136 }
137 httpSrv := http.Server{
138 Addr: addr,
139 Handler: srv,
140 }
141 go func() {
142 if err := httpSrv.ListenAndServe(); err != nil {
143 log.Fatalf("serving %q: %v", listen, err)
144 }
145 }()
146 case "ident":
147 if srv.Identd == nil {
148 srv.Identd = soju.NewIdentd()
149 }
150
151 host := u.Host
152 if _, _, err := net.SplitHostPort(host); err != nil {
153 host = host + ":113"
154 }
155 ln, err := net.Listen("tcp", host)
156 if err != nil {
157 log.Fatalf("failed to start listener on %q: %v", listen, err)
158 }
159 ln = proxyProtoListener(ln, srv)
160 go func() {
161 if err := srv.Identd.Serve(ln); err != nil {
162 log.Printf("serving %q: %v", listen, err)
163 }
164 }()
165 default:
166 log.Fatalf("failed to listen on %q: unsupported scheme", listen)
167 }
168
169 log.Printf("server listening on %q", listen)
170 }
171
172 sigCh := make(chan os.Signal, 1)
173 signal.Notify(sigCh, syscall.SIGINT, syscall.SIGTERM)
174
175 if err := srv.Start(); err != nil {
176 log.Fatal(err)
177 }
178
179 <-sigCh
180 log.Print("shutting down server")
181 srv.Shutdown()
182}
183
184func proxyProtoListener(ln net.Listener, srv *soju.Server) net.Listener {
185 return &proxyproto.Listener{
186 Listener: ln,
187 Policy: func(upstream net.Addr) (proxyproto.Policy, error) {
188 tcpAddr, ok := upstream.(*net.TCPAddr)
189 if !ok {
190 return proxyproto.IGNORE, nil
191 }
192 if srv.AcceptProxyIPs.Contains(tcpAddr.IP) {
193 return proxyproto.USE, nil
194 }
195 return proxyproto.IGNORE, nil
196 },
197 }
198}
Note: See TracBrowser for help on using the repository browser.