* api: allow API requests as managed outpost's account when using secret_key Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: load secret key from env Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outposts: make listener IP configurable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost/proxy: run outpost in background and pass requests conditionally Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * outpost: unify branding to embedded Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web/admin: fix embedded outpost not being editable Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * web: fix mismatched host detection Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tests/e2e: fix LDAP test not including user for embedded outpost Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * tests/e2e: fix user matching Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * api: add tests for secret_key auth Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org> * root: load environment variables using github.com/Netflix/go-env Signed-off-by: Jens Langhammer <jens.langhammer@beryju.org>
		
			
				
	
	
		
			117 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
			
		
		
	
	
			117 lines
		
	
	
		
			2.6 KiB
		
	
	
	
		
			Go
		
	
	
	
	
	
package main
 | 
						|
 | 
						|
import (
 | 
						|
	"fmt"
 | 
						|
	"net/url"
 | 
						|
	"time"
 | 
						|
 | 
						|
	"github.com/getsentry/sentry-go"
 | 
						|
	log "github.com/sirupsen/logrus"
 | 
						|
	"goauthentik.io/internal/common"
 | 
						|
	"goauthentik.io/internal/config"
 | 
						|
	"goauthentik.io/internal/constants"
 | 
						|
	"goauthentik.io/internal/gounicorn"
 | 
						|
	"goauthentik.io/internal/outpost/ak"
 | 
						|
	"goauthentik.io/internal/outpost/proxy"
 | 
						|
	"goauthentik.io/internal/web"
 | 
						|
)
 | 
						|
 | 
						|
var running = true
 | 
						|
 | 
						|
func main() {
 | 
						|
	log.SetLevel(log.DebugLevel)
 | 
						|
	config.DefaultConfig()
 | 
						|
	err := config.LoadConfig("./authentik/lib/default.yml")
 | 
						|
	if err != nil {
 | 
						|
		log.WithError(err).Warning("failed to load default config")
 | 
						|
	}
 | 
						|
	err = config.LoadConfig("./local.env.yml")
 | 
						|
	if err != nil {
 | 
						|
		log.WithError(err).Debug("failed to local config")
 | 
						|
	}
 | 
						|
	err = config.FromEnv()
 | 
						|
	if err != nil {
 | 
						|
		log.WithError(err).Debug("failed to environment variables")
 | 
						|
	}
 | 
						|
	config.ConfigureLogger()
 | 
						|
 | 
						|
	if config.G.ErrorReporting.Enabled {
 | 
						|
		err := sentry.Init(sentry.ClientOptions{
 | 
						|
			Dsn:              "https://a579bb09306d4f8b8d8847c052d3a1d3@sentry.beryju.org/8",
 | 
						|
			AttachStacktrace: true,
 | 
						|
			TracesSampleRate: 0.6,
 | 
						|
			Release:          fmt.Sprintf("authentik@%s", constants.VERSION),
 | 
						|
			Environment:      config.G.ErrorReporting.Environment,
 | 
						|
		})
 | 
						|
		if err != nil {
 | 
						|
			log.WithError(err).Warning("failed to init sentry")
 | 
						|
		}
 | 
						|
	}
 | 
						|
 | 
						|
	ex := common.Init()
 | 
						|
	defer common.Defer()
 | 
						|
 | 
						|
	u, _ := url.Parse("http://localhost:8000")
 | 
						|
 | 
						|
	g := gounicorn.NewGoUnicorn()
 | 
						|
	ws := web.NewWebServer()
 | 
						|
	defer g.Kill()
 | 
						|
	defer ws.Shutdown()
 | 
						|
	for {
 | 
						|
		go attemptStartBackend(g)
 | 
						|
		ws.Start()
 | 
						|
		go attemptProxyStart(ws, u)
 | 
						|
 | 
						|
		<-ex
 | 
						|
		running = false
 | 
						|
		log.WithField("logger", "authentik").Info("shutting down webserver")
 | 
						|
		go ws.Shutdown()
 | 
						|
		log.WithField("logger", "authentik").Info("killing gunicorn")
 | 
						|
		g.Kill()
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func attemptStartBackend(g *gounicorn.GoUnicorn) {
 | 
						|
	for {
 | 
						|
		err := g.Start()
 | 
						|
		if !running {
 | 
						|
			return
 | 
						|
		}
 | 
						|
		log.WithField("logger", "authentik.g").WithError(err).Warning("gunicorn process died, restarting")
 | 
						|
	}
 | 
						|
}
 | 
						|
 | 
						|
func attemptProxyStart(ws *web.WebServer, u *url.URL) {
 | 
						|
	maxTries := 100
 | 
						|
	attempt := 0
 | 
						|
	// Sleep to wait for the app server to start
 | 
						|
	time.Sleep(30 * time.Second)
 | 
						|
	for {
 | 
						|
		log.WithField("logger", "authentik").Debug("attempting to init outpost")
 | 
						|
		ac := ak.NewAPIController(*u, config.G.SecretKey)
 | 
						|
		if ac == nil {
 | 
						|
			attempt += 1
 | 
						|
			time.Sleep(1 * time.Second)
 | 
						|
			if attempt > maxTries {
 | 
						|
				break
 | 
						|
			}
 | 
						|
			continue
 | 
						|
		}
 | 
						|
		srv := proxy.NewServer(ac)
 | 
						|
		ws.ProxyServer = srv
 | 
						|
		ac.Server = srv
 | 
						|
		log.WithField("logger", "authentik").Debug("attempting to start outpost")
 | 
						|
		err := ac.StartBackgorundTasks()
 | 
						|
		if err != nil {
 | 
						|
			attempt += 1
 | 
						|
			time.Sleep(15 * time.Second)
 | 
						|
			if attempt > maxTries {
 | 
						|
				break
 | 
						|
			}
 | 
						|
			continue
 | 
						|
		} else {
 | 
						|
			select {}
 | 
						|
		}
 | 
						|
	}
 | 
						|
}
 |