Merge pull request #60 from AssetsArt/acme

✨ Add ACME support and improve configuration handling

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "easy-proxy"
-version = "0.1.6"
+version = "0.1.7"
 edition = "2021"
 
 [dependencies]
@@ -27,6 +27,8 @@ sha2 = "0.10"
 rcgen = "0.13"
 openssl = { version = "0.10", features = ["vendored"] }
 clap = { version="4.5", features = ["derive"] }
+hmac = "0.12" 
+chrono = "0.4"
 
 [profile.release]
 overflow-checks = true

README.md

@@ -21,7 +21,7 @@ Easy Proxy supports the following features:
   - [x] HTTPS
 - Certificate Management
   - [x] Custom
-  - [ ] ACME (WIP)
+  - [x] ACME
 - Service Endpoint
   - [x] HTTP
   - [ ] HTTPS
@@ -56,6 +56,8 @@ proxy:
   http: "0.0.0.0:80"
   https: "0.0.0.0:443"
 config_dir: "/etc/easy-proxy/proxy"
+# optional
+acme_store: "/etc/easy-proxy/acme.json" # auto generated
 pingora:
   # https://github.com/cloudflare/pingora/blob/main/docs/user_guide/daemon.md
   daemon: true
@@ -103,10 +105,12 @@ tls:
   - name: my-tls
     type: custom # acme, custom
     # acme: # required if type is acme
+    #   provider: letsencrypt # letsencrypt or buypass // optional default letsencrypt
     #   email: admin@domain.com
     key: /etc/easy-proxy/ssl/localhost.key
     cert: /etc/easy-proxy/ssl/localhost.crt
-    # chain: .config/ssl/localhost.chain.crt # optional
+    # chain: # optional
+    #   - /etc/easy-proxy/ssl/chain.pem
 
 # Routes to be proxied
 routes:

scripts/install.sh

@@ -74,6 +74,7 @@ fi
 
 # Create configuration directory and default config
 sudo mkdir -p "$CONFIG_DIR/proxy"
+sudo mkdir -p "$CONFIG_DIR/tls"
 CONFIG_FILE="$CONFIG_DIR/conf.yaml"
 if [ ! -f "$CONFIG_FILE" ]; then
     echo "Creating default configuration..."
@@ -82,6 +83,7 @@ proxy:
   http: "0.0.0.0:80"
   https: "0.0.0.0:443"
 config_dir: "/etc/easy-proxy/proxy"
+acme_store: "/etc/easy-proxy/acme.json"
 pingora:
   daemon: true
   threads: $(nproc)