implements https

Author: tacxou

.gitignore

@@ -3,6 +3,7 @@
 .nuxt/
 .nitro/
 .cache/
+certificates/
 dist/
 node_modules/
 .DS_Store/

Makefile

@@ -4,6 +4,12 @@ APPNAME?=sesame-app-manager
 APP_PORT?=3002
 PLATFORM?=linux/amd64
 
+CERT_DIR = ./certificates
+COMMON_NAME = localhost
+DAYS_VALID = 365
+
+$(shell mkdir -p $(CERT_DIR))
+
 .DEFAULT_GOAL := help
 help:
 	@printf "\033[33mUsage:\033[0m\n  make [target] [arg=\"val\"...]\n\n\033[33mTargets:\033[0m\n"
@@ -49,3 +55,23 @@ exec:
 		-e NODE_ENV=development \
 		-v $(CURDIR):/data \
 		$(IMGNAME) bash
+
+generate-ssl-cert: ## Générer les certificats HTTPS auto-signés
+	@echo "Génération des certificats HTTPS auto-signés..."
+	@openssl req -x509 \
+		-newkey rsa:4096 \
+		-keyout $(CERT_DIR)/server.key \
+		-out $(CERT_DIR)/server.crt \
+		-days $(DAYS_VALID) \
+		-nodes \
+		-subj "/CN=$(COMMON_NAME)"
+	@chmod 600 $(CERT_DIR)/server.key
+	@chmod 644 $(CERT_DIR)/server.crt
+	@echo "Certificats générés avec succès dans $(CERT_DIR)"
+
+clean-ssl-cert: ## Nettoyer les certificats HTTPS
+	@rm -rf $(CERT_DIR)
+	@echo "Certificats supprimés"
+
+show-cert-info: ## Afficher les informations du certificat
+	@openssl x509 -in $(CERT_DIR)/server.crt -text -noout

nuxt.config.ts

@@ -4,6 +4,7 @@ import pugPlugin from 'vite-plugin-pug'
 import openapiTS from 'openapi-typescript'
 import { defineNuxtConfig } from 'nuxt/config'
 import { parse } from 'yaml'
+import consola from 'consola'
 
 const SESAME_APP_API_URL = process.env.SESAME_APP_API_URL || 'http://localhost:4002'
 
@@ -16,6 +17,19 @@ if (process.env.SESAME_APP_DARK_MODE) {
   }
 }
 
+let https = {}
+if (/yes|1|on|true/i.test(`${process.env.SESAME_HTTPS_ENABLED}`)) {
+  try {
+    https = {
+      key: readFileSync(`${process.env.SESAME_HTTPS_PATH_KEY}`, 'utf8'),
+      cert: readFileSync(`${process.env.SESAME_HTTPS_PATH_CERT}`, 'utf8'),
+    };
+    consola.info('[Nuxt] SSL certificates loaded successfully')
+  } catch (error) {
+    consola.warn('[Nuxt] Error while reading SSL certificates', error)
+  }
+}
+
 // https://nuxt.com/docs/api/configuration/nuxt-config
 export default defineNuxtConfig({
   ssr: false,
@@ -25,6 +39,7 @@ export default defineNuxtConfig({
   debug: !!process.env.DEBUG,
   devServer: {
     port: 3000,
+    https,
   },
   devtools: {
     enabled: process.env.NODE_ENV === 'development',

start.mjs

@@ -51,6 +51,16 @@ function buildNuxt() {
 }
 
 ;(async () => {
+  if (/yes|1|on|true/i.test(`${process.env.SESAME_HTTPS_ENABLED}`)) {
+    try {
+      process.env.NITRO_SSL_KEY = readFileSync(`${process.env.SESAME_HTTPS_PATH_KEY}`, 'utf8')
+      process.env.NITRO_SSL_CERT = readFileSync(`${process.env.SESAME_HTTPS_PATH_CERT}`, 'utf8')
+      consola.info('[Nuxt] SSL certificates loaded successfully')
+    } catch (error) {
+      consola.warn('[Nuxt] Error while reading SSL certificates', error)
+    }
+  }
+
   if (hashEnv() !== readHash()) {
     consola.warn('Hash changed, rebuilding...')
     consola.info(`Hash: ${hashEnv()}, Previous: ${readHash()}`)