mitchell/selfpass
1
0
Fork 0
mirror of https://github.com/mitchell/selfpass.git synced 2025-12-14 13:27:21 +00:00
Code Issues Projects Releases Packages Wiki Activity

Refactor server to make use of Docker secrets

Browse source
This commit is contained in:
mitchell 2019-08-08 00:46:51 -04:00
parent 78f61f3ca7
commit d83a4641a3
6 changed files with 53 additions and 1406 deletions
Download patch file Download diff file Expand all files Collapse all files

15
services/cmd/main.go
View file

@ -5,6 +5,7 @@ import (
"crypto/x509"
"flag"
"io"
"io/ioutil"
stdlog "log"
"net"
"os"
@ -31,6 +32,9 @@ func main() {
jsonLogs = flag.Bool("json-logs", false, "enables json logging")
port = flag.String("port", "8080", "specify the port to listen on")
verbose = flag.Bool("v", false, "be more verbose")
caFile = flag.String("ca", "/run/secrets/ca", "specify an alternate ca file")
certFile = flag.String("cert", "/run/secrets/cert", "specify an alternate cert file")
keyFile = flag.String("key", "/run/secrets/key", "specify an alternate key file")
)
flag.Parse()
@ -40,11 +44,18 @@ func main() {
logger = newLogger(os.Stdout, *jsonLogs)
keypair, err := tls.X509KeyPair([]byte(cert), []byte(key))
ca, err := ioutil.ReadFile(*caFile)
check(err)
cert, err := ioutil.ReadFile(*certFile)
check(err)
key, err := ioutil.ReadFile(*keyFile)
check(err)
keypair, err := tls.X509KeyPair(cert, key)
check(err)
caPool := x509.NewCertPool()
caPool.AppendCertsFromPEM([]byte(ca))
caPool.AppendCertsFromPEM(ca)
creds := credentials.NewTLS(&tls.Config{
Certificates: []tls.Certificate{keypair},