-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathNginxGenerator.cpp
More file actions
242 lines (192 loc) · 6.78 KB
/
Copy pathNginxGenerator.cpp
File metadata and controls
242 lines (192 loc) · 6.78 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
/**
*
* @file NginxGenerator.cpp
* @author Gaspard Kirira
*
* Copyright 2026, Gaspard Kirira. All rights reserved.
* https://github.com/vixcpp/vix
* Use of this source code is governed by a MIT license
* that can be found in the License file.
*
* Vix.cpp
*/
#include <vix/cli/commands/proxy/NginxGenerator.hpp>
#include <vix/cli/commands/proxy/NginxOutput.hpp>
#include <cstdlib>
#include <filesystem>
#include <fstream>
#include <iostream>
#include <sstream>
#include <string>
namespace fs = std::filesystem;
namespace vix::commands::proxy::nginx_generator
{
namespace
{
std::string shell_quote(const std::string &value)
{
std::string out = "'";
for (char c : value)
{
if (c == '\'')
out += "'\\''";
else
out += c;
}
out += "'";
return out;
}
bool run_cmd(const std::string &cmd)
{
return std::system(cmd.c_str()) == 0;
}
std::string websocket_location(const NginxProxyConfig &cfg)
{
std::ostringstream out;
out << " location = " << cfg.websocketPath << " {\n";
out << " proxy_pass http://127.0.0.1:" << cfg.websocketPort << "/;\n";
out << " proxy_http_version 1.1;\n\n";
out << " proxy_set_header Upgrade $http_upgrade;\n";
out << " proxy_set_header Connection \"upgrade\";\n\n";
out << " proxy_set_header Host $host;\n";
out << " proxy_set_header X-Real-IP $remote_addr;\n";
out << " proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n";
out << " proxy_set_header X-Forwarded-Proto $scheme;\n\n";
out << " proxy_read_timeout 3600s;\n";
out << " proxy_send_timeout 3600s;\n";
out << " proxy_buffering off;\n";
out << " }\n";
return out.str();
}
std::string render_tls_config(const NginxProxyConfig &cfg)
{
std::ostringstream out;
out << "server {\n";
out << " listen 80;\n";
out << " listen [::]:80;\n";
out << " server_name " << cfg.domain << ";\n\n";
out << " return 301 https://$host$request_uri;\n";
out << "}\n\n";
out << "server {\n";
out << " listen 443 ssl http2;\n";
out << " listen [::]:443 ssl http2;\n";
out << " server_name " << cfg.domain << ";\n\n";
out << " ssl_certificate " << cfg.certificatePath.string() << ";\n";
out << " ssl_certificate_key " << cfg.certificateKeyPath.string() << ";\n\n";
out << " location / {\n";
out << " proxy_pass http://127.0.0.1:" << cfg.httpPort << ";\n";
out << " proxy_http_version 1.1;\n\n";
out << " proxy_set_header Connection \"\";\n";
out << " proxy_set_header Host $host;\n";
out << " proxy_set_header X-Real-IP $remote_addr;\n";
out << " proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n";
out << " proxy_set_header X-Forwarded-Proto $scheme;\n\n";
out << " proxy_connect_timeout 10s;\n";
out << " proxy_send_timeout 60s;\n";
out << " proxy_read_timeout 60s;\n";
out << " }\n\n";
if (cfg.websocketEnabled)
out << websocket_location(cfg);
out << "}\n";
return out.str();
}
std::string render_plain_http_config(const NginxProxyConfig &cfg)
{
std::ostringstream out;
out << "server {\n";
out << " listen 80;\n";
out << " listen [::]:80;\n";
out << " server_name " << cfg.domain << ";\n\n";
out << " location / {\n";
out << " proxy_pass http://127.0.0.1:" << cfg.httpPort << ";\n";
out << " proxy_http_version 1.1;\n\n";
out << " proxy_set_header Connection \"\";\n";
out << " proxy_set_header Host $host;\n";
out << " proxy_set_header X-Real-IP $remote_addr;\n";
out << " proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n";
out << " proxy_set_header X-Forwarded-Proto $scheme;\n\n";
out << " proxy_connect_timeout 10s;\n";
out << " proxy_send_timeout 60s;\n";
out << " proxy_read_timeout 60s;\n";
out << " }\n\n";
if (cfg.websocketEnabled)
out << websocket_location(cfg);
out << "}\n";
return out.str();
}
}
std::string render_config(const NginxProxyConfig &cfg)
{
if (cfg.tlsEnabled)
return render_tls_config(cfg);
return render_plain_http_config(cfg);
}
int init(const NginxProxyConfig &cfg)
{
nginx_output::print_init_summary(std::cout, cfg);
if (cfg.domain.empty())
{
nginx_output::error(std::cerr, "Missing proxy domain.");
nginx_output::fix(std::cerr, "add production.proxy.domain to vix.json");
return 1;
}
if (cfg.tlsEnabled &&
(cfg.certificatePath.empty() || cfg.certificateKeyPath.empty()))
{
nginx_output::error(std::cerr, "Missing TLS certificate paths.");
nginx_output::fix(std::cerr, "add production.proxy.tls.certificate and production.proxy.tls.certificate_key to vix.json");
return 1;
}
const std::string config = render_config(cfg);
const fs::path tmp = fs::temp_directory_path() / cfg.appName;
{
std::ofstream out(tmp);
if (!out)
{
nginx_output::error(
std::cerr,
"Failed to write temporary Nginx config: " + tmp.string());
return 1;
}
out << config;
}
if (!run_cmd(
"sudo cp " +
shell_quote(tmp.string()) +
" " +
shell_quote(cfg.sitesAvailablePath.string())))
{
nginx_output::error(std::cerr, "Failed to install Nginx site config.");
return 1;
}
run_cmd("rm -f " + shell_quote(tmp.string()));
if (!run_cmd(
"sudo ln -sfn " +
shell_quote(cfg.sitesAvailablePath.string()) +
" " +
shell_quote(cfg.sitesEnabledPath.string())))
{
nginx_output::error(std::cerr, "Failed to enable Nginx site.");
return 1;
}
if (!run_cmd("sudo nginx -t"))
{
nginx_output::error(std::cerr, "Nginx config is invalid.");
nginx_output::fix(std::cerr, "sudo nginx -t");
return 1;
}
nginx_output::ok(std::cout, "nginx config is valid");
if (!run_cmd("sudo systemctl reload nginx"))
{
nginx_output::error(std::cerr, "Failed to reload Nginx.");
if (!run_cmd("systemctl is-active --quiet nginx"))
nginx_output::fix(std::cerr, "sudo systemctl start nginx");
else
nginx_output::fix(std::cerr, "sudo systemctl reload nginx");
return 1;
}
nginx_output::ok(std::cout, "nginx reloaded");
nginx_output::ok(std::cout, "proxy installed: " + cfg.domain);
return 0;
}
}