85 lines
1.9 KiB
Go
85 lines
1.9 KiB
Go
package main
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"flag"
|
|
"log"
|
|
"os"
|
|
"strconv"
|
|
)
|
|
|
|
func main() {
|
|
var conf_file string
|
|
|
|
// Parse args and read config
|
|
flag.StringVar(&conf_file, "c", "", "Path to config file")
|
|
flag.Parse()
|
|
if conf_file == "" {
|
|
_, err := os.Stat("/etc/molly.conf")
|
|
if err == nil {
|
|
conf_file = "/etc/molly.conf"
|
|
}
|
|
}
|
|
config, err := getConfig(conf_file)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
|
|
// Open log files
|
|
errorLogFile, err := os.OpenFile(config.ErrorLog, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
defer errorLogFile.Close()
|
|
errorLog := log.New(errorLogFile, "", log.Ldate | log.Ltime)
|
|
|
|
accessLogFile, err := os.OpenFile(config.AccessLog, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)
|
|
if err != nil {
|
|
errorLog.Println("Error opening access log file: " + err.Error())
|
|
log.Fatal(err)
|
|
}
|
|
defer accessLogFile.Close()
|
|
|
|
// Read TLS files, create TLS config
|
|
cert, err := tls.LoadX509KeyPair(config.CertPath, config.KeyPath)
|
|
if err != nil {
|
|
errorLog.Println("Error loading TLS keypair: " + err.Error())
|
|
log.Fatal(err)
|
|
}
|
|
tlscfg := &tls.Config{
|
|
Certificates: []tls.Certificate{cert},
|
|
MinVersion: tls.VersionTLS12,
|
|
ClientAuth: tls.RequestClientCert,
|
|
}
|
|
|
|
// Create TLS listener
|
|
listener, err := tls.Listen("tcp", ":"+strconv.Itoa(config.Port), tlscfg)
|
|
if err != nil {
|
|
errorLog.Println("Error creating TLS listener: " + err.Error())
|
|
log.Fatal(err)
|
|
}
|
|
defer listener.Close()
|
|
|
|
// Start log handling routines
|
|
accessLogEntries := make(chan LogEntry, 10)
|
|
go func() {
|
|
for {
|
|
entry := <-accessLogEntries
|
|
writeLogEntry(accessLogFile, entry)
|
|
}
|
|
}()
|
|
|
|
// Restrict access to the files specified in config
|
|
enableSecurityRestrictions(config, errorLog)
|
|
|
|
// Infinite serve loop
|
|
for {
|
|
conn, err := listener.Accept()
|
|
if err != nil {
|
|
errorLog.Println("Error accepting connection: " + err.Error())
|
|
log.Fatal(err)
|
|
}
|
|
go handleGeminiRequest(conn, config, accessLogEntries, errorLog)
|
|
}
|
|
|
|
}
|