✨Please port thruster "Automatic TLS certificate management with Let's Encrypt" to current user_server-web-http project, you can read thruster source code from /Users/guochunzhong/git/oss/thruster, no need do remote clone from https://github.com/basecamp/thruster.

Below is thruster's Automatic TLS function location, as a hint and maybe not complete:

- HTTP(S) servers: [internal/server.go](mdc:internal/server.go)
  - HTTP always listens on `HTTP_PORT`; if TLS is configured, HTTP only redirects to HTTPS
  - HTTPS listens on `HTTPS_PORT` with autocert from `ACME_DIRECTORY` and optional EAB
  - Timeouts come from config: idle/read/write

- TLS decisions: [internal/config.go](mdc:internal/config.go)
  - `HasTLS()` is true when `TLS_DOMAIN` has one or more domains
  - Certificates cached under `STORAGE_PATH`

Please remember using configs/user_server.yml style configure instead of ENV style.

If you need change sponge, the direct dependency of user_server-web-http, do it at `/Users/guochunzhong/git/oss/sponge` directly.

Author: Eric-Guo

cmd/user_server/initial/createService.go

@@ -1,8 +1,6 @@
 package initial
 
 import (
-	"strconv"
-
 	"test-user-server/internal/config"
 	"test-user-server/internal/server"
 
@@ -15,8 +13,7 @@ func CreateServices() []app.IServer {
 	var servers []app.IServer
 
 	// create a http service
-	httpAddr := ":" + strconv.Itoa(cfg.HTTP.Port)
-	httpServer := server.NewHTTPServer(httpAddr,
+	httpServer := server.NewHTTPServer(cfg.HTTP,
 		server.WithHTTPIsProd(cfg.App.Env == "prod"),
 	)
 	servers = append(servers, httpServer)

configs/user_server.yml

@@ -20,7 +20,19 @@ app:
 # http server settings
 http:
   port: 8080                # listen port
+  httpsPort: 8443           # https listen port when tls is enabled
   timeout: 0                # request timeout, unit(second), if 0 means not set, if greater than 0 means set timeout, if enableHTTPProfile is true, it needs to set 0 or greater than 60s
+  idleTimeout: 60           # http idle timeout, unit(second)
+  readTimeout: 30           # http read timeout, unit(second)
+  writeTimeout: 30          # http write timeout, unit(second)
+  tls:
+    domains:
+      - ""              # list of domains for automatic tls certificates, empty disables tls
+    acmeDirectory: "https://acme-v02.api.letsencrypt.org/directory" # acme directory url
+    storagePath: "./storage/autocert"   # directory to cache certificates
+    eab:
+      kid: ""              # external account binding key identifier
+      hmacKey: ""          # base64url encoded external account binding hmac key
 
 
 
@@ -83,5 +95,3 @@ jaeger:
   agentPort: 6831
 
 
-
-

deployments/kubernetes/user_server-configmap.yml

@@ -27,7 +27,19 @@ data:
     # http server settings
     http:
       port: 8080                # listen port
+      httpsPort: 8443           # https listen port when tls is enabled
       timeout: 0                # request timeout, unit(second), if 0 means not set, if greater than 0 means set timeout, if enableHTTPProfile is true, it needs to set 0 or greater than 60s
+      idleTimeout: 60           # http idle timeout, unit(second)
+      readTimeout: 30           # http read timeout, unit(second)
+      writeTimeout: 30          # http write timeout, unit(second)
+      tls:
+        domains:
+          - ""              # list of domains for automatic tls certificates, empty disables tls
+        acmeDirectory: "https://acme-v02.api.letsencrypt.org/directory" # acme directory url
+        storagePath: "./storage/autocert"   # directory to cache certificates
+        eab:
+          kid: ""              # external account binding key identifier
+          hmacKey: ""          # base64url encoded external account binding hmac key
     
     
     

go.mod

@@ -10,6 +10,7 @@ require (
 	github.com/swaggo/files v0.0.0-20220728132757-551d4a08d97a
 	github.com/swaggo/gin-swagger v1.5.2
 	github.com/swaggo/swag v1.8.12
+	golang.org/x/crypto v0.36.0
 	golang.org/x/sync v0.12.0
 	gorm.io/gorm v1.30.3
 )
@@ -110,7 +111,6 @@ require (
 	go.uber.org/multierr v1.9.0 // indirect
 	go.uber.org/zap v1.24.0 // indirect
 	golang.org/x/arch v0.8.0 // indirect
-	golang.org/x/crypto v0.36.0 // indirect
 	golang.org/x/net v0.38.0 // indirect
 	golang.org/x/sys v0.34.0 // indirect
 	golang.org/x/text v0.23.0 // indirect