Ssl key config options

see #66

Author: RblSb

build/server.js

@@ -11,6 +11,8 @@
 	"localAdmins": true,
 	"allowProxyIps": true,
 	"localNetworkOnly": false,
+	"sslKeyPemPath": "",
+	"sslCertPemPath": "",
 	"templateUrl": "https://youtube.com/playlist?list=PL9FiZUDVMu9tc_85frYognMOVFC_-VkSX",
 	"youtubeApiKey": "AIzaSyDTk1OPRI9cDkAK_BKsBcv10DQCHse-QaA",
 	"youtubePlaylistLimit": 50,

default-config.json

@@ -17,7 +17,7 @@
   },
   "homepage": "https://github.com/RblSb/SyncTube#readme",
   "dependencies": {
-    "ws": "^8.17.2"
+    "ws": "^8.18.3"
   },
   "engines": {
     "node": ">=14.17.0"

package-lock.json

@@ -42,6 +42,8 @@ typedef Config = {
 	localAdmins:Bool,
 	allowProxyIps:Bool,
 	localNetworkOnly:Bool,
+	sslKeyPemPath:String,
+	sslCertPemPath:String,
 	templateUrl:String,
 	youtubeApiKey:String,
 	youtubePlaylistLimit:Int,

package.json

@@ -96,6 +96,11 @@ class HttpServer {
 					uploadFileLastChunk(req, res);
 				case "/upload":
 					uploadFile(req, res);
+			}
+			return;
+		}
+		if (req.method == "POST") {
+			switch url.pathname {
 				case "/setup":
 					finishSetup(req, res);
 			}

src/Types.hx

@@ -16,6 +16,7 @@ import js.Node.__dirname;
 import js.Node.process;
 import js.node.Crypto;
 import js.node.Http;
+import js.node.Https;
 import js.node.http.IncomingMessage;
 import js.node.url.URL;
 import js.npm.ws.Server as WSServer;
@@ -159,16 +160,33 @@ class Main {
 		preparePort();
 	}
 
+	function isDefaultPort():Bool {
+		return port == 80 || port == 443;
+	}
+
+	function getPort(protocol:String):Int {
+		if (!isDefaultPort()) return port;
+		return switch protocol {
+			case "https": 443;
+			case "http", _: 80;
+		}
+	}
+
 	function runServer():Void {
-		trace('Local: http://$localIp:$port');
+		final ssl = getSslConfig(config);
+		final protocol = ssl == null ? "http" : "https";
+		final port = getPort(protocol);
+		final colonPort = isDefaultPort() ? "" : ':$port';
+
+		trace('Local: $protocol://$localIp$colonPort');
 		if (config.localNetworkOnly) {
 			trace("Global network is disabled in config");
 		} else {
 			if (!isNoState) Utils.getGlobalIp(ip -> {
 				final isIp6 = ip.contains(":");
 				if (isIp6) ip = '[$ip]';
 				globalIp = ip;
-				trace('Global: http://$globalIp:$port');
+				trace('Global: $protocol://$globalIp$colonPort');
 			});
 		}
 
@@ -181,10 +199,26 @@ class Main {
 		});
 		Lang.init('$dir/langs');
 
-		final server = Http.createServer((req, res) -> {
-			httpServer.serveFiles(req, res);
-		});
-		wss = new WSServer({server: server});
+		final server = if (ssl == null) {
+			Http.createServer(httpServer.serveFiles);
+		} else {
+			if (isDefaultPort()) {
+				try {
+					final redirectHttpServer = Http.createServer((req, res) -> {
+						final host = req.headers["host"] ?? "";
+						final location = 'https://$host${req.url}';
+						res.writeHead(302, {"location": location});
+						res.end();
+					});
+					redirectHttpServer.listen(80);
+				} catch (e) {
+					trace("Cannot run http server on port 80 for https redirects:", e);
+				}
+			}
+
+			Https.createServer({key: ssl.key, cert: ssl.cert}, httpServer.serveFiles);
+		}
+		wss = new WSServer({server: cast server});
 		wss.on("connection", onConnect);
 		if (config.localNetworkOnly) server.listen(port, localIp, onServerInited);
 		else server.listen(port, onServerInited);
@@ -201,6 +235,27 @@ class Main {
 		};
 	}
 
+	function getSslConfig(config:Config):Null<{key:String, cert:String}> {
+		final c = config;
+		if (c.sslKeyPemPath.length == 0 && c.sslCertPemPath.length == 0) return null;
+		final hasBoth = FileSystem.exists(c.sslKeyPemPath)
+			&& FileSystem.exists(c.sslCertPemPath);
+		if (hasBoth) {
+			final key = File.getContent(c.sslKeyPemPath);
+			final cert = File.getContent(c.sslCertPemPath);
+			return {
+				key: key,
+				cert: cert
+			}
+		}
+
+		if (!FileSystem.exists(c.sslKeyPemPath))
+			trace('sslKeyPemPath: absolute file path not found: ${c.sslKeyPemPath}');
+		if (!FileSystem.exists(c.sslCertPemPath))
+			trace('sslCertPemPath: absolute file path not found: ${c.sslCertPemPath}');
+		return null;
+	}
+
 	dynamic function onServerInited():Void {};
 
 	public function exit():Void {