65 lines
1.9 KiB
JavaScript
65 lines
1.9 KiB
JavaScript
"use strict";
|
|
|
|
// npm install spdy@3.x
|
|
|
|
//var Greenlock = require('greenlock-express')
|
|
var Greenlock = require("../");
|
|
|
|
var greenlock = Greenlock.create({
|
|
// Let's Encrypt v2 is ACME draft 11
|
|
version: "draft-11",
|
|
|
|
server: "https://acme-v02.api.letsencrypt.org/directory",
|
|
// Note: If at first you don't succeed, stop and switch to staging
|
|
// https://acme-staging-v02.api.letsencrypt.org/directory
|
|
|
|
// You MUST change this to a valid email address
|
|
email: "jon@example.com",
|
|
|
|
// You MUST NOT build clients that accept the ToS without asking the user
|
|
agreeTos: true,
|
|
|
|
// You MUST change these to valid domains
|
|
// NOTE: all domains will validated and listed on the certificate
|
|
approvedDomains: ["example.com", "www.example.com"],
|
|
|
|
// You MUST have access to write to directory where certs are saved
|
|
// ex: /home/foouser/acme/etc
|
|
configDir: "~/.config/acme/", // MUST have write access
|
|
|
|
// Get notified of important updates and help me make greenlock better
|
|
communityMember: true
|
|
|
|
//, debug: true
|
|
});
|
|
|
|
////////////////////////
|
|
// http-01 Challenges //
|
|
////////////////////////
|
|
|
|
// http-01 challenge happens over http/1.1, not http2
|
|
var redirectHttps = require("redirect-https")();
|
|
var acmeChallengeHandler = greenlock.middleware(redirectHttps);
|
|
require("http")
|
|
.createServer(acmeChallengeHandler)
|
|
.listen(80, function() {
|
|
console.log("Listening for ACME http-01 challenges on", this.address());
|
|
});
|
|
|
|
////////////////////////
|
|
// http2 via SPDY h2 //
|
|
////////////////////////
|
|
|
|
// spdy is a drop-in replacement for the https API
|
|
var spdyOptions = Object.assign({}, greenlock.tlsOptions);
|
|
spdyOptions.spdy = { protocols: ["h2", "http/1.1"], plain: false };
|
|
var myApp = require("./my-express-app.js");
|
|
var server = require("spdy").createServer(spdyOptions, myApp);
|
|
server.on("error", function(err) {
|
|
console.error(err);
|
|
});
|
|
server.on("listening", function() {
|
|
console.log("Listening for SPDY/http2/https requests on", this.address());
|
|
});
|
|
server.listen(443);
|