79bc17afab
To support starting a network service on demand and to support a "least privilege-approach" with regards to the permission a network service process needs to have, systemd supports opening a network socket on behalf of the service and passing it as an open file descriptor. The service gets notified about open file descriptors for this purpose as well as metadata such as named listeners via environment variables. This patch adds support for prefixing the listen address passed with --address with "sd-listen-fd:" to access these file descriptors, taking either a listener name passed using the `LISTEN_FDNAMES` environment variable or `LISTEN_FD_$n` for unnamed file descriptiors where `n` is the id of the descriptor starting at 3 (LISTEN_FD_3). See sd_listen_fds(3)
142 lines
3.2 KiB
Go
142 lines
3.2 KiB
Go
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"strings"
|
|
"syscall"
|
|
|
|
"github.com/coreos/go-systemd/v22/activation"
|
|
"github.com/hacdias/webdav/v5/lib"
|
|
"github.com/spf13/cobra"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
func init() {
|
|
flags := rootCmd.Flags()
|
|
flags.StringP("config", "c", "", "config file path")
|
|
flags.StringP("address", "a", lib.DefaultAddress, "address to listen on")
|
|
flags.IntP("port", "p", lib.DefaultPort, "port to listen on")
|
|
flags.BoolP("tls", "t", lib.DefaultTLS, "enable TLS")
|
|
flags.String("cert", lib.DefaultCert, "path to TLS certificate")
|
|
flags.String("key", lib.DefaultKey, "path to TLS key")
|
|
flags.StringP("prefix", "P", lib.DefaultPrefix, "URL path prefix")
|
|
}
|
|
|
|
var rootCmd = &cobra.Command{
|
|
Use: "webdav",
|
|
Short: "A simple to use WebDAV server",
|
|
Long: `If you don't set "config", it will look for a configuration file called
|
|
config.{json, toml, yaml, yml} in the following directories:
|
|
|
|
- ./
|
|
- /etc/webdav/
|
|
|
|
The precedence of the configuration values are as follows:
|
|
|
|
- flags
|
|
- environment variables
|
|
- configuration file
|
|
- defaults
|
|
|
|
The environment variables are prefixed by "WD_" followed by the option
|
|
name in caps. So to set "cert" via an env variable, you should
|
|
set WD_CERT.`,
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
flags := cmd.Flags()
|
|
|
|
cfgFilename, _ := flags.GetString("config")
|
|
|
|
cfg, err := lib.ParseConfig(cfgFilename, flags)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Setup the logger based on the configuration
|
|
logger, err := cfg.GetLogger()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
zap.ReplaceGlobals(logger)
|
|
|
|
// Create HTTP handler from the config
|
|
handler, err := lib.NewHandler(cfg)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
defer func() {
|
|
// Flush the logger at the end
|
|
_ = zap.L().Sync()
|
|
}()
|
|
|
|
// Build listener
|
|
listener, err := getListener(cfg)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// Trap exiting signals
|
|
quit := make(chan os.Signal, 1)
|
|
|
|
go func() {
|
|
zap.L().Info("listening", zap.String("address", listener.Addr().String()))
|
|
|
|
var err error
|
|
if cfg.TLS {
|
|
err = http.ServeTLS(listener, handler, cfg.Cert, cfg.Key)
|
|
} else {
|
|
err = http.Serve(listener, handler)
|
|
}
|
|
|
|
if err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
zap.L().Error("failed to start server", zap.Error(err))
|
|
}
|
|
|
|
quit <- os.Interrupt
|
|
}()
|
|
|
|
signal.Notify(quit, os.Interrupt, syscall.SIGTERM)
|
|
signal := <-quit
|
|
|
|
zap.L().Info("caught signal, shutting down", zap.Stringer("signal", signal))
|
|
_ = listener.Close()
|
|
|
|
return nil
|
|
},
|
|
}
|
|
|
|
func getListener(cfg *lib.Config) (net.Listener, error) {
|
|
var (
|
|
address string
|
|
network string
|
|
)
|
|
|
|
if strings.HasPrefix(cfg.Address, "sd-listen-fd:") {
|
|
listeners, err := activation.ListenersWithNames()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
address := cfg.Address[13:]
|
|
listener, ok := listeners[address]
|
|
|
|
if !ok || len(listener) < 1 {
|
|
return nil, errors.New("unknown sd-listen-fd address '" + address + "'")
|
|
}
|
|
|
|
return listener[0], nil
|
|
} else if strings.HasPrefix(cfg.Address, "unix:") {
|
|
address = cfg.Address[5:]
|
|
network = "unix"
|
|
} else {
|
|
address = fmt.Sprintf("%s:%d", cfg.Address, cfg.Port)
|
|
network = "tcp"
|
|
}
|
|
|
|
return net.Listen(network, address)
|
|
}
|