certificates work

src/backend/internal/nginx.js

@@ -1,13 +1,12 @@
 'use strict';
 
-const _                   = require('lodash');
-const fs                  = require('fs');
-const Liquid              = require('liquidjs');
-const logger              = require('../logger').nginx;
-const utils               = require('../lib/utils');
-const error               = require('../lib/error');
-const internalCertificate = require('./certificate');
-const debug_mode          = process.env.NODE_ENV !== 'production';
+const _          = require('lodash');
+const fs         = require('fs');
+const Liquid     = require('liquidjs');
+const logger     = require('../logger').nginx;
+const utils      = require('../lib/utils');
+const error      = require('../lib/error');
+const debug_mode = process.env.NODE_ENV !== 'production';
 
 const internalNginx = {
 
@@ -120,7 +119,7 @@ const internalNginx = {
         }
 
         let renderEngine = Liquid({
-            root: __dirname + '/../templates/',
+            root: __dirname + '/../templates/'
         });
 
         return new Promise((resolve, reject) => {
@@ -154,6 +153,85 @@ const internalNginx = {
         });
     },
 
+    /**
+     * This generates a temporary nginx config listening on port 80 for the domain names listed
+     * in the certificate setup. It allows the letsencrypt acme challenge to be requested by letsencrypt
+     * when requesting a certificate without having a hostname set up already.
+     *
+     * @param   {Object}  certificate
+     * @returns {Promise}
+     */
+    generateLetsEncryptRequestConfig: certificate => {
+        if (debug_mode) {
+            logger.info('Generating LetsEncrypt Request Config:', certificate);
+        }
+
+        let renderEngine = Liquid({
+            root: __dirname + '/../templates/'
+        });
+
+        return new Promise((resolve, reject) => {
+            let template = null;
+            let filename = '/data/nginx/temp/letsencrypt_' + certificate.id + '.conf';
+            try {
+                template = fs.readFileSync(__dirname + '/../templates/letsencrypt-request.conf', {encoding: 'utf8'});
+            } catch (err) {
+                reject(new error.ConfigurationError(err.message));
+                return;
+            }
+
+            renderEngine
+                .parseAndRender(template, certificate)
+                .then(config_text => {
+                    fs.writeFileSync(filename, config_text, {encoding: 'utf8'});
+
+                    if (debug_mode) {
+                        logger.success('Wrote config:', filename, config_text);
+                    }
+
+                    resolve(true);
+                })
+                .catch(err => {
+                    if (debug_mode) {
+                        logger.warn('Could not write ' + filename + ':', err.message);
+                    }
+
+                    reject(new error.ConfigurationError(err.message));
+                });
+        });
+    },
+
+    /**
+     * This removes the temporary nginx config file generated by `generateLetsEncryptRequestConfig`
+     *
+     * @param   {Object}  certificate
+     * @param   {Boolean} [throw_errors]
+     * @returns {Promise}
+     */
+    deleteLetsEncryptRequestConfig: (certificate, throw_errors) => {
+        return new Promise((resolve, reject) => {
+            try {
+                let config_file = '/data/nginx/temp/letsencrypt_' + certificate.id + '.conf';
+
+                if (debug_mode) {
+                    logger.warn('Deleting nginx config: ' + config_file);
+                }
+
+                fs.unlinkSync(config_file);
+            } catch (err) {
+                if (debug_mode) {
+                    logger.warn('Could not delete config:', err.message);
+                }
+
+                if (throw_errors) {
+                    reject(err);
+                }
+            }
+
+            resolve();
+        });
+    },
+
     /**
      * @param   {String}  host_type
      * @param   {Object}  host
@@ -184,6 +262,35 @@ const internalNginx = {
 
             resolve();
         });
+    },
+
+    /**
+     * @param   {String}  host_type
+     * @param   {Array}   hosts
+     * @returns {Promise}
+     */
+    bulkGenerateConfigs: (host_type, hosts) => {
+        let promises = [];
+        hosts.map(function (host) {
+            promises.push(internalNginx.generateConfig(host_type, host));
+        });
+
+        return Promise.all(promises);
+    },
+
+    /**
+     * @param   {String}  host_type
+     * @param   {Array}   hosts
+     * @param   {Boolean} [throw_errors]
+     * @returns {Promise}
+     */
+    bulkDeleteConfigs: (host_type, hosts, throw_errors) => {
+        let promises = [];
+        hosts.map(function (host) {
+            promises.push(internalNginx.deleteConfig(host_type, host, throw_errors));
+        });
+
+        return Promise.all(promises);
     }
 };