add signal handler for SIGHUP to reload the HTTP and NATS servers

[github-actions]

grlx/certs/tls.go

Line 305 in e997e0a

// TODO: add signal handler for SIGHUP to reload the HTTP and NATS servers

		log.Fatalf("Error closing key.pem: %v", err)
	}
	log.Debug("wrote key.pem")
	if config.NoRotateCerts {
		log.Debug("Not rotating certs, as per config")
		return
	}
	go rotateTLSCerts()
}

func rotateTLSCerts() {
	log.Debug("Rotating TLS certificates...")
	CertFile := config.CertFile
	// open the cert file and determine the notbefore date and the notafter date
	// if the notafter date is within 33% of the config.CertificateValidTime, then
	// generate a new cert
	// otherwise sleep for 1 day and check again
	needsRotation := func() (bool, error) {
		file, err := os.Open(CertFile)
		if err != nil {
			return false, errors.Join(err, errors.New("could not open cert file"))
		}
		defer file.Close()
		stats, statsErr := file.Stat()
		if statsErr != nil {
			return false, errors.Join(statsErr, errors.New("could not stat cert file"))
		}
		size := stats.Size()
		bytes := make([]byte, size)
		bufr := bufio.NewReader(file)
		_, err = bufr.Read(bytes)
		if err != nil {
			return false, errors.Join(err, errors.New("could not read cert file into buffer"))
		}
		block, _ := pem.Decode(bytes)
		cert, err := x509.ParseCertificate(block.Bytes)
		if err != nil {
			return false, errors.Join(err, errors.New("could not parse cert"))
		}
		return time.Now().After(cert.NotAfter.Add(-config.CertificateValidTime / 3)), nil
	}
	reloadHttpServer := func() {
		shutdownTimeout, cancel := context.WithTimeout(context.Background(), 15*time.Second)
		defer cancel()
		httpServer.Shutdown(shutdownTimeout)
		SetHttpServer(server.StartAPIServer())
	}
	for {
		shouldRotate, err := needsRotation()
		if err != nil {
			log.Error(err)
			time.Sleep(time.Minute)
			continue
		}
		if shouldRotate {
			genCert(true)
			pki.ReloadNatsServer()
			reloadHttpServer()
			// TODO: add signal handler for SIGHUP to reload the HTTP and NATS servers
		}
		time.Sleep(24 * time.Hour)
	}
}

func SetHttpServer(s *http.Server) {
	httpServer = s
}