128 lines
3.9 KiB
Go
128 lines
3.9 KiB
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"net/http"
|
|
"os"
|
|
"path/filepath"
|
|
"runtime"
|
|
"strings"
|
|
|
|
"git.pcux.cn/xuans/Scert/backend/internal/app"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/config"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/certificate"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/dnsprovider"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/firewall"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/httpapi"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/secretstore"
|
|
"git.pcux.cn/xuans/Scert/backend/internal/setup"
|
|
)
|
|
|
|
type Runtime struct {
|
|
core *app.App
|
|
cancel context.CancelFunc
|
|
initial http.Handler
|
|
initialDNS *setup.DNSVerificationManager
|
|
}
|
|
|
|
func Open(configPath, baseDir string) (*Runtime, error) {
|
|
configPath = strings.TrimSpace(configPath)
|
|
baseDir = strings.TrimSpace(baseDir)
|
|
if configPath == "" {
|
|
configPath = filepath.Join(defaultPaths(baseDir).Config, "scert.json")
|
|
}
|
|
if baseDir == "" {
|
|
baseDir = filepath.Dir(filepath.Dir(configPath))
|
|
}
|
|
|
|
cfg, err := config.LoadWithEnv(configPath)
|
|
if err != nil {
|
|
if !errors.Is(err, os.ErrNotExist) {
|
|
return nil, err
|
|
}
|
|
cfg = defaultConfig(baseDir)
|
|
if err := cfg.ApplyEnvironment(); err != nil {
|
|
return nil, err
|
|
}
|
|
if err := cfg.Validate(); err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
ctx, cancel := context.WithCancel(context.Background())
|
|
if !cfg.SetupReady {
|
|
// 桌面端保留本机向导，但不再为初始化预先创建正式数据库和后台任务。
|
|
store, err := secretstore.Open(cfg.Paths.Config)
|
|
if err != nil { cancel(); return nil, err }
|
|
dns := setup.NewDNSVerificationManager(dnsprovider.NewTester(dnsprovider.NewLegoFactory()), store)
|
|
issuer := certificate.NewService(cfg, nil, store, dnsprovider.NewLegoFactory(), certificate.NewAccountRepository(store))
|
|
issuer.SetDNSAuthorizationChecker(dnsprovider.NewAliyunAuthorizationChecker())
|
|
server := httpapi.New(httpapi.Dependencies{
|
|
Config: cfg, ConfigPath: configPath, SetupDNS: dns, Secrets: store,
|
|
Firewall: firewall.NewManager(), IssueSetupCertificate: issuer.IssueForSetup,
|
|
RollbackSetupCertificate: certificate.RollbackSavedResource,
|
|
})
|
|
handler := http.HandlerFunc(func(writer http.ResponseWriter, request *http.Request) {
|
|
if request.URL.Path == "/api/v1/setup" || strings.HasPrefix(request.URL.Path, "/api/v1/setup/") {
|
|
server.Handler().ServeHTTP(writer, request)
|
|
return
|
|
}
|
|
http.NotFound(writer, request)
|
|
})
|
|
return &Runtime{cancel: cancel, initial: handler, initialDNS: dns}, nil
|
|
}
|
|
core, err := app.NewWithConfigPath(ctx, cfg, configPath)
|
|
if err != nil {
|
|
cancel()
|
|
return nil, err
|
|
}
|
|
if core.Renewal != nil && cfg.SetupReady {
|
|
core.Renewal.Start(ctx)
|
|
}
|
|
return &Runtime{core: core, cancel: cancel}, nil
|
|
}
|
|
|
|
func (r *Runtime) Handler() http.Handler {
|
|
if r != nil && r.initial != nil { return r.initial }
|
|
if r == nil || r.core == nil || r.core.HTTP == nil {
|
|
return http.HandlerFunc(func(writer http.ResponseWriter, _ *http.Request) {
|
|
http.Error(writer, "Scert 核心服务未初始化", http.StatusServiceUnavailable)
|
|
})
|
|
}
|
|
return r.core.HTTP.Handler()
|
|
}
|
|
|
|
func (r *Runtime) Close() error {
|
|
if r == nil {
|
|
return nil
|
|
}
|
|
if r.cancel != nil {
|
|
r.cancel()
|
|
}
|
|
if r.initialDNS != nil { r.initialDNS.DiscardAll() }
|
|
if r.core != nil {
|
|
return r.core.Close()
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func defaultConfig(baseDir string) config.Config {
|
|
cfg := config.Default(baseDir)
|
|
if runtime.GOOS == "linux" && strings.TrimSpace(baseDir) != "" {
|
|
install := filepath.Join(baseDir, "Scert")
|
|
cfg.Paths.Install = install
|
|
cfg.Paths.Certificate = filepath.Join(install, "ssl")
|
|
cfg.Paths.Config = filepath.Join(install, "config")
|
|
cfg.Paths.Data = filepath.Join(install, "data")
|
|
cfg.Paths.Log = filepath.Join(install, "logs")
|
|
cfg.Paths.Backup = filepath.Join(install, "backups")
|
|
cfg.Database.DSN = filepath.Join(cfg.Paths.Data, "scert.db")
|
|
}
|
|
return cfg
|
|
}
|
|
|
|
func defaultPaths(baseDir string) config.PathsConfig {
|
|
return defaultConfig(baseDir).Paths
|
|
}
|