Function main

https-tls/acme-letsencrypt/src/main.rs:139–181

()

#[actix_web::main]
async fn main() -> eyre::Result<()> {
    env_logger::init_from_env(env_logger::Env::new().default_filter_or("info"));
    color_eyre::install()?;

    rustls::crypto::aws_lc_rs::default_provider()
        .install_default()
        .unwrap();

    //   Load keys
    // ==============================================
    // = IMPORTANT:                                 =
    // = This process has to be repeated            =
    // = before the certificate expires (< 90 days) =
    // ==============================================
    // Obtain TLS certificate
    //
    // NOTE: Persisting the private key and certificate chain somewhere is
    // recommended in order to avoid unnecessarily regenerating of TLS certs.
    let cert = gen_tls_cert(DOMAIN_NAME, CONTACT_EMAIL).await?;

    let rustls_config = load_rustls_config(cert)?;

    log::info!("starting HTTP server at https://{DOMAIN_NAME}:443");

    // Start HTTP server!
    let srv = HttpServer::new(|| App::new().route("/", web::get().to(index)))
        .bind_rustls_0_23(("0.0.0.0", 443), rustls_config)?
        .run();

    let srv_handle = srv.handle();

    let _auto_shutdown_task = rt::spawn(async move {
        // Shutdown server every 4 weeks so that TLS certs can be regenerated if
        // needed. This is only appropriate in contexts like Kubernetes which
        // can orchestrate restarts.
        rt::time::sleep(Duration::from_secs(60 * 60 * 24 * 28)).await;
        srv_handle.stop(true).await;
    });

    srv.await?;

    Ok(())
}

fn load_rustls_config(cert: Certificate) -> eyre::Result<rustls::ServerConfig> {
    // init server config builder with safe defaults