Function applyLetsEncrypt

runner/runner.go:117–140

(s *http.Server, conf *config.Configuration)

}

func applyLetsEncrypt(s *http.Server, conf *config.Configuration) {
	httpClient := &http.Client{
		Transport: &LoggingRoundTripper{Name: "Let's Encrypt", RoundTripper: http.DefaultTransport},
		Timeout:   60 * time.Second,
	}

	acmeClient := &acme.Client{
		HTTPClient:   httpClient,
		DirectoryURL: conf.Server.SSL.LetsEncrypt.DirectoryURL,
	}
	certManager := autocert.Manager{
		Client: acmeClient,
		Prompt: func(tosURL string) bool {
			if !conf.Server.SSL.LetsEncrypt.AcceptTOS {
				log.Fatalf("Let's Encrypt TOS must be accepted to use Let's Encrypt, please acknowledge TOS at %s and set GOTIFY_SERVER_SSL_LETSENCRYPT_ACCEPTTOS=true\n", tosURL)
			}
			return true
		},
		HostPolicy: autocert.HostWhitelist(conf.Server.SSL.LetsEncrypt.Hosts...),
		Cache:      autocert.DirCache(conf.Server.SSL.LetsEncrypt.Cache),
	}
	s.Handler = certManager.HTTPHandler(s.Handler)
	s.TLSConfig = certManager.TLSConfig()
}