mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-03-21 20:41:57 +00:00
85b4aba9bc
Renaming it back to clients to reflect service accounts and headless clients use cases in the terminology. Such a rename will be very painful on live data so better if we do it early on. --------- Co-authored-by: Jamil Bou Kheir <jamilbk@users.noreply.github.com>
81 lines
1.9 KiB
Elixir
81 lines
1.9 KiB
Elixir
defmodule API.Endpoint do
|
|
use Phoenix.Endpoint, otp_app: :api
|
|
|
|
plug Plug.RewriteOn, [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto]
|
|
plug Plug.MethodOverride
|
|
plug :put_hsts_header
|
|
plug Plug.Head
|
|
|
|
if code_reloading? do
|
|
plug Phoenix.CodeReloader
|
|
end
|
|
|
|
plug RemoteIp,
|
|
headers: ["x-forwarded-for"],
|
|
proxies: {__MODULE__, :external_trusted_proxies, []},
|
|
clients: {__MODULE__, :clients, []}
|
|
|
|
plug Plug.RequestId
|
|
# TODO: Rework LoggerJSON to use Telemetry and integrate it
|
|
# https://hexdocs.pm/phoenix/Phoenix.Logger.html
|
|
plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
|
|
|
|
socket "/gateway", API.Gateway.Socket, API.Sockets.options()
|
|
socket "/client", API.Client.Socket, API.Sockets.options()
|
|
socket "/relay", API.Relay.Socket, API.Sockets.options()
|
|
|
|
plug :healthz
|
|
plug :not_found
|
|
|
|
def put_hsts_header(conn, _opts) do
|
|
scheme =
|
|
config(:url, [])
|
|
|> Keyword.get(:scheme)
|
|
|
|
if scheme == "https" do
|
|
put_resp_header(
|
|
conn,
|
|
"strict-transport-security",
|
|
"max-age=63072000; includeSubDomains; preload"
|
|
)
|
|
else
|
|
conn
|
|
end
|
|
end
|
|
|
|
def healthz(%Plug.Conn{request_path: "/healthz"} = conn, _opts) do
|
|
conn
|
|
|> put_resp_content_type("application/json")
|
|
|> send_resp(200, Jason.encode!(%{status: "ok"}))
|
|
|> halt()
|
|
end
|
|
|
|
def healthz(conn, _opts) do
|
|
conn
|
|
end
|
|
|
|
def not_found(conn, _opts) do
|
|
conn
|
|
|> send_resp(:not_found, "Not found")
|
|
|> halt()
|
|
end
|
|
|
|
def real_ip_opts do
|
|
[
|
|
headers: ["x-forwarded-for"],
|
|
proxies: {__MODULE__, :external_trusted_proxies, []},
|
|
clients: {__MODULE__, :clients, []}
|
|
]
|
|
end
|
|
|
|
def external_trusted_proxies do
|
|
Domain.Config.fetch_env!(:api, :external_trusted_proxies)
|
|
|> Enum.map(&to_string/1)
|
|
end
|
|
|
|
def clients do
|
|
Domain.Config.fetch_env!(:api, :private_clients)
|
|
|> Enum.map(&to_string/1)
|
|
end
|
|
end
|