mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-03-22 05:41:54 +00:00
d9eb2d18df
TODO: - [x] Cluster formation for all API and web nodes - [x] Injest Docker logs to Stackdriver - [x] Fix assets building for prod To finish later: - [ ] Structured logging: https://issuetracker.google.com/issues/285950891 - [ ] Better networking policy (eg. use public postmark ranges and deny all unwanted egress) - [ ] OpenTelemetry collector for Google Stackdriver - [ ] LoggerJSON.Plug integration --------- Signed-off-by: Andrew Dryga <andrew@dryga.com> Co-authored-by: Jamil <jamilbk@users.noreply.github.com>
73 lines
1.7 KiB
Elixir
73 lines
1.7 KiB
Elixir
defmodule API.Endpoint do
|
|
use Phoenix.Endpoint, otp_app: :api
|
|
|
|
plug Plug.RewriteOn, [:x_forwarded_host, :x_forwarded_port, :x_forwarded_proto]
|
|
plug Plug.MethodOverride
|
|
plug :put_hsts_header
|
|
plug Plug.Head
|
|
|
|
if code_reloading? do
|
|
plug Phoenix.CodeReloader
|
|
end
|
|
|
|
plug RemoteIp,
|
|
headers: ["x-forwarded-for"],
|
|
proxies: {__MODULE__, :external_trusted_proxies, []},
|
|
clients: {__MODULE__, :clients, []}
|
|
|
|
plug Plug.RequestId
|
|
# TODO: Rework LoggerJSON to use Telemetry and integrate it
|
|
# https://hexdocs.pm/phoenix/Phoenix.Logger.html
|
|
plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]
|
|
|
|
socket "/gateway", API.Gateway.Socket, API.Sockets.options()
|
|
socket "/device", API.Device.Socket, API.Sockets.options()
|
|
socket "/relay", API.Relay.Socket, API.Sockets.options()
|
|
|
|
plug :healthz
|
|
plug :not_found
|
|
|
|
def put_hsts_header(conn, _opts) do
|
|
scheme =
|
|
config(:url, [])
|
|
|> Keyword.get(:scheme)
|
|
|
|
if scheme == "https" do
|
|
put_resp_header(
|
|
conn,
|
|
"strict-transport-security",
|
|
"max-age=63072000; includeSubDomains; preload"
|
|
)
|
|
else
|
|
conn
|
|
end
|
|
end
|
|
|
|
def healthz(%Plug.Conn{request_path: "/healthz"} = conn, _opts) do
|
|
conn
|
|
|> put_resp_content_type("application/json")
|
|
|> send_resp(200, Jason.encode!(%{status: "ok"}))
|
|
|> halt()
|
|
end
|
|
|
|
def healthz(conn, _opts) do
|
|
conn
|
|
end
|
|
|
|
def not_found(conn, _opts) do
|
|
conn
|
|
|> send_resp(:not_found, "Not found")
|
|
|> halt()
|
|
end
|
|
|
|
def external_trusted_proxies do
|
|
Domain.Config.fetch_env!(:api, :external_trusted_proxies)
|
|
|> Enum.map(&to_string/1)
|
|
end
|
|
|
|
def clients do
|
|
Domain.Config.fetch_env!(:api, :private_clients)
|
|
|> Enum.map(&to_string/1)
|
|
end
|
|
end
|