network

func ACMETLSConfig ¶

func ACMETLSConfig(domain, email, storageDir string) (*tls.Config, error)

ACMETLSConfig obtains (and thereafter auto-renews) a Let's Encrypt certificate for the given domain using the HTTP-01 challenge, and returns a *tls.Config ready to wrap a listener with tls.NewListener.

HTTP-01 requires TCP port 80 to be free and reachable from the internet: certmagic's HTTP solver transiently binds :80 for the duration of each challenge (issuance and renewal), then releases it. TLS-ALPN is disabled because the panel/sub servers do not necessarily listen on :443.

Certificates are persisted under storageDir so they survive restarts and we avoid re-issuing (which would otherwise hit Let's Encrypt rate limits).

func NewAutoHttpsConn ¶

func NewAutoHttpsConn(conn net.Conn) net.Conn

func NewAutoHttpsListener ¶

func NewAutoHttpsListener(listener net.Listener) net.Listener