103 lines
4.8 KiB
Plaintext
103 lines
4.8 KiB
Plaintext
include /etc/nginx/conf.d/include/proxy-buffer;
|
|
include /etc/nginx/conf.d/include/proxy-pass-internal;
|
|
include /etc/nginx/conf.d/include/portal-access-check;
|
|
|
|
# variable definititions - we need to define a variable to be able to access it in lua by ngx.var.something
|
|
set $skylink ''; # placeholder for the base64 skylink
|
|
set $skylink_base32 ''; # placeholder for the base32 skylink
|
|
|
|
# resolve handshake domain by requesting to /hnsres endpoint and assign correct values to $skylink and $rest
|
|
rewrite_by_lua_block {
|
|
local json = require('cjson')
|
|
local httpc = require("resty.http").new()
|
|
|
|
-- make a get request to /hnsres endpoint with the domain name from request_uri
|
|
-- 10.10.10.50 points to handshake-api service (alias not available when using resty-http)
|
|
local hnsres_res, hnsres_err = httpc:request_uri("http://10.10.10.50:3100/hnsres/" .. ngx.var.hns_domain)
|
|
|
|
-- print error and exit with 500 or exit with response if status is not 200
|
|
if hnsres_err or (hnsres_res and hnsres_res.status ~= ngx.HTTP_OK) then
|
|
ngx.status = (hnsres_err and ngx.HTTP_INTERNAL_SERVER_ERROR) or hnsres_res.status
|
|
ngx.header["content-type"] = "text/plain"
|
|
ngx.say(hnsres_err or hnsres_res.body)
|
|
return ngx.exit(ngx.status)
|
|
end
|
|
|
|
-- since /hnsres endpoint response is a json, we need to decode it before we access it
|
|
-- example response: '{"skylink":"sia://XABvi7JtJbQSMAcDwnUnmp2FKDPjg8_tTTFP4BwMSxVdEg"}'
|
|
local hnsres_json = json.decode(hnsres_res.body)
|
|
|
|
-- define local variable containing rest of the skylink if provided
|
|
local skylink_rest
|
|
|
|
if hnsres_json.skylink then
|
|
-- try to match the skylink with sia:// prefix
|
|
skylink, skylink_rest = string.match(hnsres_json.skylink, "sia://([^/?]+)(.*)")
|
|
|
|
-- in case the skylink did not match, assume that there is no sia:// prefix and try to match again
|
|
if skylink == nil then
|
|
skylink, skylink_rest = string.match(hnsres_json.skylink, "/?([^/?]+)(.*)")
|
|
end
|
|
elseif hnsres_json.registry then
|
|
local publickey = hnsres_json.registry.publickey
|
|
local datakey = hnsres_json.registry.datakey
|
|
|
|
-- make a get request to /skynet/registry endpoint with the credentials from text record
|
|
-- 10.10.10.10 points to sia service (alias not available when using resty-http)
|
|
local registry_res, registry_err = httpc:request_uri("http://10.10.10.10:9980/skynet/registry?publickey=" .. publickey .. "&datakey=" .. datakey, {
|
|
headers = { ["User-Agent"] = "Sia-Agent" }
|
|
})
|
|
|
|
-- print error and exit with 500 or exit with response if status is not 200
|
|
if registry_err or (registry_res and registry_res.status ~= ngx.HTTP_OK) then
|
|
ngx.status = (registry_err and ngx.HTTP_INTERNAL_SERVER_ERROR) or registry_res.status
|
|
ngx.header["content-type"] = "text/plain"
|
|
ngx.say(registry_err or registry_res.body)
|
|
return ngx.exit(ngx.status)
|
|
end
|
|
|
|
-- since /skynet/registry endpoint response is a json, we need to decode it before we access it
|
|
local registry_json = json.decode(registry_res.body)
|
|
-- response will contain a hex encoded skylink, we need to decode it
|
|
local data = (registry_json.data:gsub('..', function (cc)
|
|
return string.char(tonumber(cc, 16))
|
|
end))
|
|
|
|
skylink = data
|
|
end
|
|
|
|
-- fail with a generic 404 if skylink has not been extracted from a valid /hnsres response for some reason
|
|
if not skylink then
|
|
return ngx.exit(ngx.HTTP_NOT_FOUND)
|
|
end
|
|
|
|
ngx.var.skylink = skylink
|
|
if ngx.var.path == "/" and skylink_rest ~= nil and skylink_rest ~= "" and skylink_rest ~= "/" then
|
|
ngx.var.path = skylink_rest
|
|
end
|
|
|
|
-- assign base32 skylink to be used in proxy_pass
|
|
ngx.var.skylink_base32 = require("skynet.skylink").base32(ngx.var.skylink)
|
|
}
|
|
|
|
# host header has to be adjusted to properly match server name
|
|
proxy_set_header Host $skylink_base32.$skynet_portal_domain;
|
|
|
|
# pass the skylink request to subdomain skylink server
|
|
proxy_pass $scheme://$server_addr$path$is_args$args;
|
|
|
|
# in case siad returns location header, we need to replace the skylink with the domain name
|
|
header_filter_by_lua_block {
|
|
ngx.header["Skynet-Portal-Api"] = ngx.var.scheme .. "://" .. ngx.var.skynet_portal_domain
|
|
ngx.header["Skynet-Server-Api"] = ngx.var.scheme .. "://" .. ngx.var.skynet_server_domain
|
|
|
|
if ngx.header.location then
|
|
-- match location redirect part after the skylink
|
|
local path = string.match(ngx.header.location, "[^/?]+(.*)");
|
|
|
|
-- because siad will set the location header to ie. XABvi7JtJbQSMAcDwnUnmp2FKDPjg8_tTTFP4BwMSxVdEg/index.html
|
|
-- we need to replace the skylink with the domain_name so we are not redirected to skylink
|
|
ngx.header.location = ngx.var.hns_domain .. path
|
|
end
|
|
}
|