relay/src/relay.ts

// @ts-ignore
import DHT from "@hyperswarm/dht";
// @ts-ignore
import {relay} from "@hyperswarm/dht-relay";
// @ts-ignore
import Stream from "@hyperswarm/dht-relay/ws";
import express, {Express} from "express";
import path from "path";
import {fileURLToPath} from "url";
import config from "./config.js";
import * as http from "http";
import * as https from "https";
import * as tls from "tls";
import * as acme from "acme-client";
import {Buffer} from "buffer";
import {intervalToDuration} from "date-fns";
import cron from "node-cron";
import {get as getDHT} from "./dht.js";
import WS from "ws";
// @ts-ignore
import DHT from "@hyperswarm/dht";
import {pack} from "msgpackr";
import {overwriteRegistryEntry} from "libskynetnode";
import {hashDataKey} from "./util.js";

let sslCtx: tls.SecureContext = tls.createSecureContext();
const sslParams: tls.SecureContextOptions = {};

const sslPrivateKey = await acme.forge.createPrivateKey();
const acmeClient = new acme.Client({
    accountKey: sslPrivateKey,
    directoryUrl: acme.directory.letsencrypt.production,
});

let app: Express;
let router = express.Router();

export async function start() {
    const relayPort = config.str("relay-port");
    app = express();
    app.use(function (req, res, next) {
        router(req, res, next);
    });

    let httpsServer = https.createServer({
        SNICallback(servername, cb) {
            cb(null, sslCtx);
        },
    });

    let httpServer = http.createServer(app);

    cron.schedule("0 * * * *", createOrRenewSSl);

    await new Promise((resolve) => {
        httpServer.listen(80, "0.0.0.0", function () {
            console.info("HTTP Listening on ", httpServer.address());
            resolve(null);
        });
    });
    const dht = await getDHT();

    let wsServer = new WS.Server({server: httpsServer});

    wsServer.on("connection", (socket: any) => {
        relay(dht, new Stream(false, socket));
    });

    await new Promise((resolve) => {
        httpsServer.listen(relayPort, "0.0.0.0", function () {
            console.info("Relay started on ", httpsServer.address());
            resolve(null);
        });
    });

    await createOrRenewSSl();
}

async function createOrRenewSSl() {
    if (sslParams.cert) {
        const expires = (
            await acme.forge.readCertificateInfo(sslParams.cert as Buffer)
        ).notAfter;

        let duration = intervalToDuration({start: new Date(), end: expires});

        let daysLeft = (duration.months as number) * 30 + (duration.days as number);

        if (daysLeft > 30) {
            return;
        }
    }

    const [certificateKey, certificateRequest] = await acme.forge.createCsr({
        commonName: config.str("relay-domain"),
    });

    sslParams.cert = await acmeClient.auto({
        csr: certificateRequest,
        termsOfServiceAgreed: true,
        challengeCreateFn: async (authz, challenge, keyAuthorization) => {
            router.get(
                `/.well-known/acme-challenge/${challenge.token}`,
                (req, res) => {
                    res.send(keyAuthorization);
                }
            );
        },
        challengeRemoveFn: async () => {
            router = express.Router();
        },
        challengePriority: ["http-01"],
    });
    sslParams.key = certificateKey;
    sslCtx = tls.createSecureContext(sslParams);

    console.log("SSL Certificate Updated");
}