Integrierten HTTPS-Server aktiviert und an ENV gebunden

Dockerfile

@@ -29,7 +29,11 @@ ENV EW_USERNAME=admin \
     EW_PASSWORD=admin \
     EW_DB=/data/machines.json \
     EW_PRODUCTIVE=true \
-    EW_FORCEINSECURECOOKIE=false
+    EW_FORCEINSECURECOOKIE=false \
+    HTTP_PORT=8080 \
+    HTTP_TLS=false \
+    HTTP_TLS_CERTIFICATE=./server-cert.pem \
+    HTTP_TLS_PRIVATEKEY=./server-key.pem
 
 
 ENTRYPOINT ["/bin/edgewol"]

main.go

@@ -41,6 +41,10 @@ import (
 )
 
 var (
+	HTTP_PORT            string = "8080"
+	HTTP_TLS             bool   = false
+	HTTP_TLS_PRIVATEKEY  string = ""
+	HTTP_TLS_CERTIFICATE string = ""
 	username                    = GetENV("EW_USERNAME", "root")
 	password                    = GetENV("EW_PASSWORD", "root")
 	productive                  = Enabled("EW_PRODUCTIVE", false)
@@ -191,6 +195,11 @@ func main() {
 		dbPath = "./machines.json"
 	}
 
+	HTTP_PORT = GetENV("HTTP_PORT", "8080")
+	HTTP_TLS = Enabled("HTTP_TLS", true)
+	HTTP_TLS_CERTIFICATE = GetENV("HTTP_TLS_CERTIFICATE", "./server-cert.pem")
+	HTTP_TLS_PRIVATEKEY = GetENV("HTTP_TLS_PRIVATEKEY", "./server-key.pem")
+
 	loadMachines()
 
 	// Save on SIGINT/SIGTERM.
@@ -315,15 +324,18 @@ func main() {
 	http.HandleFunc("/add", addHandler)
 	http.HandleFunc("/remove", removeHandler)
 
-	addr := os.Getenv("LISTEN")
+	if HTTP_TLS {
-	if addr == "" {
+		log.Printf("WoL server listening on %s (DB: %s)", ":"+HTTP_PORT, dbPath)
-		addr = ":8080"
+		if err := http.ListenAndServeTLS(":"+HTTP_PORT, HTTP_TLS_CERTIFICATE, HTTP_TLS_PRIVATEKEY, nil); err != nil {
-	}
-
-	log.Printf("WoL server listening on %s (DB: %s)", addr, dbPath)
-	if err := http.ListenAndServe(addr, nil); err != nil {
 			log.Fatalf("http server error: %v", err)
 		}
+	} else {
+		log.Printf("WoL server listening on %s (DB: %s)", ":"+HTTP_PORT, dbPath)
+		if err := http.ListenAndServe(":"+HTTP_PORT, nil); err != nil {
+			log.Fatalf("http server error: %v", err)
+		}
+	}
+
 }
 
 // ========= persistence =========