Listen with TLS if configured

CHANGELOG.md

@@ -12,6 +12,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+* Add support for TLS so the registry can directly listen on HTTPS. []()
+
 ### Deprecated
 
 ### Known Issues

main.go

@@ -37,6 +37,9 @@ var (
  address string
  httpProfAddress string
 
+ tlsCertFile string
+ tlsKeyFile string
+
  dryRun bool
  configPath = "config.yml"
 
@@ -50,6 +53,8 @@ var (
 
 func init() {
  flag.StringVar(&address, "address", "localhost:8080", "Address of the package-registry service.")
+ flag.StringVar(&tlsCertFile, "tls-cert", "", "Path of the TLS certificate.")
+ flag.StringVar(&tlsKeyFile, "tls-key", "", "Path of the TLS key.")
  flag.StringVar(&httpProfAddress, "httpprof", "", "Enable HTTP profiler listening on the given address.")
  // This flag is experimental and might be removed in the future or renamed
  flag.BoolVar(&dryRun, "dry-run", false, "Runs a dry-run of the registry without starting the web service (experimental)")
@@ -73,7 +78,7 @@ func main() {
 
  server := initServer()
  go func() {
- err := server.ListenAndServe()
+ err := runServer(server)
  if err != nil && err != http.ErrServerClosed {
  log.Fatalf("Error occurred while serving: %s", err)
  }
@@ -129,6 +134,13 @@ func initServer() *http.Server {
  return &http.Server{Addr: address, Handler: router}
 }
 
+func runServer(server *http.Server) error {
+ if tlsCertFile != "" && tlsKeyFile != "" {
+ return server.ListenAndServeTLS(tlsCertFile, tlsKeyFile)
+ }
+ return server.ListenAndServe()
+}
+
 func initAPMTracer() *apm.Tracer {
  apm.DefaultTracer.Close()
  if _, found := os.LookupEnv("ELASTIC_APM_SERVER_URL"); !found {