Add support for HTTPS and graceful shutdown handling

Author: tacxou

Dockerfile

@@ -77,5 +77,6 @@ RUN yarn install \
 COPY --from=builder /data/dist ./dist
 
 EXPOSE 4000
+EXPOSE 4443
 
 CMD ["yarn", "run", "start:prod"]

Makefile

@@ -1,4 +1,5 @@
 APP_PORT = 4002
+APP_PORT_SECURE = 4443
 IMG_NAME = "ghcr.io/libertech-fr/sesame-orchestrator"
 BASE_NAME = "sesame"
 APP_NAME = "sesame-orchestrator"
@@ -30,6 +31,7 @@ prod: ## Start production environment
 		--network dev \
 		--name $(APP_NAME) \
 		-p $(APP_PORT):4000 \
+		-p $(APP_PORT_SECURE):4443 \
 		-p 9229:9229 \
 		-v $(CURDIR):/data \
 		$(IMG_NAME) yarn start:prod
@@ -43,6 +45,7 @@ dev: ## Start development environment
 		--network dev \
 		--name $(APP_NAME) \
 		-p $(APP_PORT):4000 \
+		-p $(APP_PORT_SECURE):4443 \
 		-p 9229:9229 \
 		-v $(CURDIR):/data \
 		$(IMG_NAME) yarn start:dev
@@ -56,6 +59,7 @@ debug: ## Start debug environment
 		--network dev \
 		--name $(APP_NAME) \
 		-p $(APP_PORT):4000 \
+		-p $(APP_PORT_SECURE):4443 \
 		-p 9229:9229 \
 		-v $(CURDIR):/data \
 		$(IMG_NAME) yarn start:debug

src/_common/observers/shutdown.observer.ts

@@ -0,0 +1,28 @@
+import { Injectable, OnApplicationShutdown } from "@nestjs/common";
+import * as http from 'http';
+
+@Injectable()
+export class ShutdownObserver implements OnApplicationShutdown {
+  private httpServers: http.Server[] = [];
+
+  public addHttpServer(server: http.Server): void {
+    this.httpServers.push(server);
+  }
+
+  public async onApplicationShutdown(): Promise<void> {
+    await Promise.all(
+      this.httpServers.map(
+        (server) =>
+          new Promise((resolve, reject) => {
+            server.close((error) => {
+              if (error) {
+                reject(error);
+              } else {
+                resolve(null);
+              }
+            });
+          }),
+      ),
+    );
+  }
+}

src/app.module.ts

@@ -22,6 +22,7 @@ import { MailadmService } from '~/settings/mailadm.service';
 import { FactorydriveModule } from '@the-software-compagny/nestjs_module_factorydrive';
 import { MigrationsService } from './migrations/migrations.service';
 import { MigrationsModule } from './migrations/migrations.module';
+import { ShutdownObserver } from './_common/observers/shutdown.observer';
 
 @Module({
   imports: [
@@ -119,6 +120,7 @@ import { MigrationsModule } from './migrations/migrations.module';
   controllers: [AppController],
   providers: [
     AppService,
+    ShutdownObserver,
     {
       provide: APP_GUARD,
       useClass: AuthGuard('jwt'),

src/main.ts

@@ -1,14 +1,17 @@
 import { NestFactory } from '@nestjs/core';
-import { NestExpressApplication } from '@nestjs/platform-express';
+import { ExpressAdapter, NestExpressApplication } from '@nestjs/platform-express';
 import cookieParser from 'cookie-parser';
-import { Response } from 'express';
+import express, { Response } from 'express';
 import passport from 'passport';
 import { rawBodyBuffer } from '~/_common/middlewares/raw-body-buffer.middleware';
 import { getLogLevel } from './_common/functions/get-log-level';
 import { AppModule } from './app.module';
 import configInstance from './config';
 import { InternalLogger } from './core/logger/internal.logger';
 import { readFileSync } from 'fs';
+import * as http from 'http';
+import * as https from 'https';
+import { ShutdownObserver } from './_common/observers/shutdown.observer';
 
 declare const module: any;
 (async (): Promise<void> => {
@@ -34,7 +37,8 @@ declare const module: any;
     }
   }
 
-  const app = await NestFactory.create<NestExpressApplication>(AppModule, {
+  const server = express();
+  const app = await NestFactory.create<NestExpressApplication>(AppModule, new ExpressAdapter(server), {
     bodyParser: false,
     rawBody: true,
     cors: true,
@@ -52,9 +56,18 @@ declare const module: any;
     await (await import('./swagger')).default(app);
   }
 
-  await app.listen(4000, async (): Promise<void> => {
-    logger.log(`Sesame - Orchestrator is READY on <http://127.0.0.1:4000> !`);
-  });
+  await app.init();
+
+  const shutdownObserver = app.get(ShutdownObserver);
+  const httpServer = http.createServer(server).listen(4000);
+  shutdownObserver.addHttpServer(httpServer);
+  logger.log(`Sesame - Orchestrator is READY on <http://127.0.0.1:4000> !`);
+
+  if (cfg.application?.https?.enabled) {
+    const httpsServer = https.createServer(extraOptions.httpsOptions!, server).listen(4443);
+    shutdownObserver.addHttpServer(httpsServer);
+    logger.log(`Sesame - Orchestrator is READY on <https://127.0.0.1:4443> !`);
+  }
 
   if (module.hot) {
     module.hot.accept();