runnerd.js

#!/usr/bin/env fibjs
var child_process = require('child_process');

if (process.argv[2] !== '--daemon' && process.argv[2] !== '--console') {
    child_process.fork(__filename, ['--daemon'], {
        stdio: "inherit",
        detached: true
    });

    console.notice(`runnerd.js is running in the background.
use runnerctrl.js to control the service process.`);

    process.exit();
}

var fs = require('fs');
var os = require('os');
var path = require('path');
var http = require('http');
var ws = require('ws');
var ssl = require('ssl');
var tls = require('tls');

var load_config = require('./lib/config');

var Runner = require('.');
var cfg = load_config();
var runner = new Runner();

function reload(r) {
    try {
        cfg = load_config();
        runner.reload(cfg);

        if (r)
            r.response.json({});
    } catch (e) {
        if (r)
            r.response.json({ error: e.message });
        else
            rethrow(e);
    }
}

function json_call(r, func) {
    try {
        r.response.json(runner[func].apply(runner, r.params));
    } catch (e) {
        r.response.json({ error: e.message });
    }
}

var handler = new http.Handler({
    '/reload': reload,
    '/list': r => json_call(r, 'list'),
    '/stat/:name/:stat/:interval': r => json_call(r, 'stat'),
    '/log/:name/:length': r => json_call(r, 'log'),
    '/attach/:name/:length': ws.upgrade((sock, r) => runner.attach(r.params[0], sock, r.params[1])),
    '/stop/:name': r => json_call(r, 'stop'),
    '/start/:name': r => json_call(r, 'start'),
    '/restart/:name': r => json_call(r, 'restart'),
    '*': r => { }
});

if (ssl.setClientCert) {
    var svr = new ssl.Server(cfg.cert.cert, cfg.cert.key, cfg.listen.address, cfg.listen.port, s => {
        if (!s.peerCert)
            return;

        var ip = s.stream.remoteAddress;
        var pub = s.peerCert.publicKey.json({ compress: true }).x;

        if (ip == '127.0.0.1' ? pub != cfg.key.pub : cfg.key.admin.indexOf(pub) < 0)
            s.write(`HTTP/1.1 403 Forbidden\r\n\r\n`);
        else
            return handler;
    });
    svr.verification = ssl.VERIFY_OPTIONAL;
    svr.start();
} else {
    var svr = new tls.Server({
        cert: cfg.cert.cert,
        key: cfg.cert.key,
        rejectUnverified: false,
        address: cfg.listen.address,
        port: cfg.listen.port
    }, s => {
        const peerCert = s.getPeerX509Certificate();
        if (!peerCert)
            return;

        var ip = s.remoteAddress;
        var pub = peerCert.publicKey.export({
            format: 'raw',
            type: 'compressed'
        }).toString('base64url');

        if (ip == '127.0.0.1' ? pub != cfg.key.pub : cfg.key.admin.indexOf(pub) < 0)
            s.write(`HTTP/1.1 403 Forbidden\r\n\r\n`);
        else
            return handler;
    });
    svr.start();
}

reload();

if (process.argv[2] == '--console')
    while (true)
        run(path.join(__dirname, "runnerctl.js"));