Add the ability to listen with TLS

delta10 · Oct 9, 2023 · 757f10b · 757f10b
1 parent 6b17fe0
commit 757f10b
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 2 deletions.
diff --git a/cmd/filter-proxy/main.go b/cmd/filter-proxy/main.go
@@ -247,7 +247,11 @@ func main() {
 		MaxHeaderBytes: 1 << 20,
 	}
 
-	log.Fatal(s.ListenAndServe())
+	if config.ListenTLS.Certificate != "" && config.ListenTLS.Key != "" {
+		log.Fatal(s.ListenAndServeTLS(config.ListenTLS.Certificate, config.ListenTLS.Key))
+	} else {
+		log.Fatal(s.ListenAndServe())
+	}
 }
 
 func authorizeRequestWithService(config *config.Config, path config.Path, r *http.Request) (*AuthorizationResponse, bool) {

diff --git a/config.yaml b/config.yaml
@@ -1,4 +1,9 @@
 listenAddress: localhost:8050
+
+# listenTls:
+#   certificate: tls.crt
+#   key: tls.key
+
 authorizationServiceUrl: http://localhost:8000/atlas/api/v1/authorize
 
 paths:

diff --git a/internal/config/config.go b/internal/config/config.go
@@ -39,7 +39,11 @@ type LogBackend struct {
 }
 
 type Config struct {
-	ListenAddress           string                `yaml:"listenAddress"`
+	ListenAddress string `yaml:"listenAddress"`
+	ListenTLS     struct {
+		Certificate string `yaml:"certificate"`
+		Key         string `yaml:"key"`
+	} `yaml:"listenTls"`
 	AuthorizationServiceURL string                `yaml:"authorizationServiceUrl"`
 	JwksURL                 string                `yaml:"jwksUrl"`
 	Paths                   []Path                `yaml:"paths"`