Method Run

internal/server/server.go:67–149

Run the server until the given context is canceled. The main HTTP server (Gin), the Prometheus /metrics server, and the gRPC server (when configured) all run as separate listeners.

(ctx context.Context)

// The main HTTP server (Gin), the Prometheus /metrics server, and the gRPC
// server (when configured) all run as separate listeners.
func (s *server) Run(ctx context.Context) error {
	// Build the REST gateway BEFORE the router so it can be mounted at
	// /v1/*. The gateway dials the gRPC server in-process via bufconn —
	// no extra port hop, no TLS plumbing.
	var gatewayCleanup func()
	if s.Dependencies.GRPCServer != nil {
		h, cleanup, err := gateway.Handler(ctx, s.Dependencies.GRPCServer.GRPCServer())
		if err != nil {
			return err
		}
		s.gatewayHandler = h
		gatewayCleanup = cleanup
		defer gatewayCleanup()
	}

	ginRouter := s.NewRouter()
	httpAddr := net.JoinHostPort(s.Config.Host, strconv.Itoa(s.Config.HTTPPort))

	// Build the main HTTP server explicitly with conservative timeouts to
	// defend against slowloris and other slow-client DoS. ReadHeaderTimeout
	// is the most important — it bounds time to receive request headers,
	// which is what slowloris exploits.
	httpSrv := &http.Server{
		Addr:              httpAddr,
		Handler:           ginRouter,
		ReadHeaderTimeout: 10 * time.Second,
		ReadTimeout:       30 * time.Second,
		WriteTimeout:      60 * time.Second,
		IdleTimeout:       120 * time.Second,
		MaxHeaderBytes:    1 << 20, // 1 MB
	}
	go func() {
		s.Dependencies.Log.Info().Str("addr", httpAddr).Msg("Starting HTTP server")
		if err := httpSrv.ListenAndServe(); err != nil && err != http.ErrServerClosed {
			s.Dependencies.Log.Error().Err(err).Msg("HTTP server failed")
		}
	}()

	mux := http.NewServeMux()
	mux.Handle("/metrics", promhttp.Handler())
	metricsAddr := net.JoinHostPort(s.Config.MetricsHost, strconv.Itoa(s.Config.MetricsPort))
	metricsSrv := &http.Server{
		Addr:              metricsAddr,
		Handler:           mux,
		ReadHeaderTimeout: 10 * time.Second,
		ReadTimeout:       30 * time.Second,
		WriteTimeout:      60 * time.Second,
		IdleTimeout:       120 * time.Second,
		MaxHeaderBytes:    1 << 20,
	}
	go func() {
		s.Dependencies.Log.Info().Str("addr", metricsAddr).Msg("Starting metrics server")
		if err := metricsSrv.ListenAndServe(); err != nil && err != http.ErrServerClosed {
			s.Dependencies.Log.Error().Err(err).Msg("Metrics server failed")
		}
	}()

	// gRPC listener — runs alongside HTTP and metrics. Cancelled context