X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=server.ts;h=9094ac943c24d0e2ad0f383993d7d67dc8733866;hb=2b86fe727490fc0e42c0d147d98c0df612d5507c;hp=97941c95822b26fd5377f598fe486ecafe8b966a;hpb=3d3441d6c7a5646388ab0a77acad57fdb63b9d32;p=github%2FChocobozzz%2FPeerTube.git diff --git a/server.ts b/server.ts index 97941c958..9094ac943 100644 --- a/server.ts +++ b/server.ts @@ -1,4 +1,6 @@ // FIXME: https://github.com/nodejs/node/pull/16853 +import { VideosCaptionCache } from './server/lib/cache/videos-caption-cache' + require('tls').DEFAULT_ECDH_CURVE = 'auto' import { isTestInstance } from './server/helpers/core-utils' @@ -10,14 +12,10 @@ if (isTestInstance()) { // ----------- Node modules ----------- import * as bodyParser from 'body-parser' import * as express from 'express' -import * as http from 'http' import * as morgan from 'morgan' -import * as path from 'path' -import * as bitTorrentTracker from 'bittorrent-tracker' import * as cors from 'cors' -import { Server as WebSocketServer } from 'ws' - -const TrackerServer = bitTorrentTracker.Server +import * as cookieParser from 'cookie-parser' +import * as helmet from 'helmet' process.title = 'peertube' @@ -25,11 +23,11 @@ process.title = 'peertube' const app = express() // ----------- Core checker ----------- -import { checkMissedConfig, checkFFmpeg, checkConfig } from './server/initializers/checker' +import { checkMissedConfig, checkFFmpeg, checkConfig, checkActivityPubUrls } from './server/initializers/checker' // Do not use barrels because we don't want to load all modules here (we need to initialize database first) import { logger } from './server/helpers/logger' -import { ACCEPT_HEADERS, API_VERSION, CONFIG, STATIC_PATHS } from './server/initializers/constants' +import { API_VERSION, CONFIG, STATIC_PATHS, CACHE, REMOTE_SCHEME } from './server/initializers/constants' const missed = checkMissedConfig() if (missed.length !== 0) { @@ -51,6 +49,13 @@ if (errorMessage !== null) { // Trust our proxy (IP forwarding...) app.set('trust proxy', CONFIG.TRUST_PROXY) +// Security middleware +app.use(helmet({ + frameguard: { + action: 'deny' // we only allow it for /videos/embed, see server/controllers/client.ts + } +})) + // ----------- Database ----------- // Initialize database and models @@ -69,10 +74,22 @@ import { installApplication } from './server/initializers' import { Emailer } from './server/lib/emailer' import { JobQueue } from './server/lib/job-queue' import { VideosPreviewCache } from './server/lib/cache' -import { apiRouter, clientsRouter, staticRouter, servicesRouter, webfingerRouter, activityPubRouter } from './server/controllers' +import { + activityPubRouter, + apiRouter, + clientsRouter, + feedsRouter, + staticRouter, + servicesRouter, + webfingerRouter, + trackerRouter, + createWebsocketServer +} from './server/controllers' import { Redis } from './server/lib/redis' import { BadActorFollowScheduler } from './server/lib/schedulers/bad-actor-follow-scheduler' import { RemoveOldJobsScheduler } from './server/lib/schedulers/remove-old-jobs-scheduler' +import { UpdateVideosScheduler } from './server/lib/schedulers/update-videos-scheduler' +import { YoutubeDlUpdateScheduler } from './server/lib/schedulers/youtube-dl-update-scheduler' // ----------- Command line ----------- @@ -80,21 +97,11 @@ import { RemoveOldJobsScheduler } from './server/lib/schedulers/remove-old-jobs- // Enable CORS for develop if (isTestInstance()) { - app.use((req, res, next) => { - // These routes have already cors - if ( - req.path.indexOf(STATIC_PATHS.TORRENTS) === -1 && - req.path.indexOf(STATIC_PATHS.WEBSEED) === -1 - ) { - return (cors({ - origin: 'http://localhost:3000', - exposedHeaders: 'Retry-After', - credentials: true - }))(req, res, next) - } - - return next() - }) + app.use(cors({ + origin: '*', + exposedHeaders: 'Retry-After', + credentials: true + })) } // For the logger @@ -107,33 +114,8 @@ app.use(bodyParser.json({ type: [ 'application/json', 'application/*+json' ], limit: '500kb' })) - -// ----------- Tracker ----------- - -const trackerServer = new TrackerServer({ - http: false, - udp: false, - ws: false, - dht: false -}) - -trackerServer.on('error', function (err) { - logger.error('Error in websocket tracker.', err) -}) - -trackerServer.on('warning', function (err) { - logger.error('Warning in websocket tracker.', err) -}) - -const server = http.createServer(app) -const wss = new WebSocketServer({ server: server, path: '/tracker/socket' }) -wss.on('connection', function (ws) { - trackerServer.onWebSocketConnection(ws) -}) - -const onHttpRequest = trackerServer.onHttpRequest.bind(trackerServer) -app.get('/tracker/announce', (req, res) => onHttpRequest(req, res, { action: 'announce' })) -app.get('/tracker/scrape', (req, res) => onHttpRequest(req, res, { action: 'scrape' })) +// Cookies +app.use(cookieParser()) // ----------- Views, routes and static files ----------- @@ -144,23 +126,16 @@ app.use(apiRoute, apiRouter) // Services (oembed...) app.use('/services', servicesRouter) -app.use('/', webfingerRouter) app.use('/', activityPubRouter) - -// Client files -app.use('/', clientsRouter) +app.use('/', feedsRouter) +app.use('/', webfingerRouter) +app.use('/', trackerRouter) // Static files app.use('/', staticRouter) -// Always serve index client page (the client is a single page application, let it handle routing) -app.use('/*', function (req, res) { - if (req.accepts(ACCEPT_HEADERS) === 'html') { - return res.sendFile(path.join(__dirname, '../client/dist/index.html')) - } - - return res.status(404).end() -}) +// Client files, last valid routes! +app.use('/', clientsRouter) // ----------- Errors ----------- @@ -177,17 +152,27 @@ app.use(function (err, req, res, next) { error = err.stack || err.message || err } - logger.error('Error in controller.', { error }) + logger.error('Error in controller.', { err: error }) return res.status(err.status || 500).end() }) +const server = createWebsocketServer(app) + // ----------- Run ----------- async function startApplication () { const port = CONFIG.LISTEN.PORT + const hostname = CONFIG.LISTEN.HOSTNAME await installApplication() + // Check activity pub urls are valid + checkActivityPubUrls() + .catch(err => { + logger.error('Error in ActivityPub URLs checker.', { err }) + process.exit(-1) + }) + // Email initialization Emailer.Instance.init() await Emailer.Instance.checkConnectionOrDie() @@ -195,17 +180,27 @@ async function startApplication () { await JobQueue.Instance.init() // Caches initializations - VideosPreviewCache.Instance.init(CONFIG.CACHE.PREVIEWS.SIZE) + VideosPreviewCache.Instance.init(CONFIG.CACHE.PREVIEWS.SIZE, CACHE.PREVIEWS.MAX_AGE) + VideosCaptionCache.Instance.init(CONFIG.CACHE.VIDEO_CAPTIONS.SIZE, CACHE.VIDEO_CAPTIONS.MAX_AGE) // Enable Schedulers BadActorFollowScheduler.Instance.enable() RemoveOldJobsScheduler.Instance.enable() + UpdateVideosScheduler.Instance.enable() + YoutubeDlUpdateScheduler.Instance.enable() // Redis initialization Redis.Instance.init() // Make server listening - server.listen(port) - logger.info('Server listening on port %d', port) - logger.info('Web server: %s', CONFIG.WEBSERVER.URL) + server.listen(port, hostname, () => { + logger.info('Server listening on %s:%d', hostname, port) + logger.info('Web server: %s', CONFIG.WEBSERVER.URL) + }) + + process.on('exit', () => { + JobQueue.Instance.terminate() + }) + + process.on('SIGINT', () => process.exit(0)) }