package caddy_anubis import ( "fmt" "net" "net/http" "github.com/TecharoHQ/anubis" libanubis "github.com/TecharoHQ/anubis/lib" "github.com/caddyserver/caddy/v2" "github.com/caddyserver/caddy/v2/caddyconfig/caddyfile" "github.com/caddyserver/caddy/v2/caddyconfig/httpcaddyfile" "github.com/caddyserver/caddy/v2/modules/caddyhttp" "go.uber.org/zap" ) func init() { caddy.RegisterModule(AnubisMiddleware{}) httpcaddyfile.RegisterHandlerDirective("anubis", parseCaddyfileHandler) httpcaddyfile.RegisterDirectiveOrder("anubis", httpcaddyfile.Before, "push") } func (AnubisMiddleware) CaddyModule() caddy.ModuleInfo { return caddy.ModuleInfo{ ID: "http.handlers.anubis", New: func() caddy.Module { return new(AnubisMiddleware) }, } } type AnubisMiddleware struct { Options libanubis.Options `json:"options"` PolicyFname string `json:"policy_fname,omitempty"` DefaultDifficulty int `json:"default_difficulty,omitempty"` anubis *libanubis.Server log *zap.Logger next caddyhttp.Handler } // Interface guards var ( _ caddyhttp.MiddlewareHandler = (*AnubisMiddleware)(nil) _ caddyfile.Unmarshaler = (*AnubisMiddleware)(nil) _ caddy.Provisioner = (*AnubisMiddleware)(nil) ) func (m *AnubisMiddleware) Provision(ctx caddy.Context) error { m.log = ctx.Logger(m) m.log.Debug("loading anubis policies", zap.String("policy_file", m.PolicyFname), zap.Int("default_difficulty", m.DefaultDifficulty)) policy, err := libanubis.LoadPoliciesOrDefault(ctx, m.PolicyFname, m.DefaultDifficulty) if err != nil { return fmt.Errorf("failed to load anubis policies from '%s': %w", m.PolicyFname, err) } m.Options.Next = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) { if err := m.next.ServeHTTP(w, r); err != nil { m.log.Error("error from next handler", zap.Error(err)) } }) m.Options.Policy = policy m.anubis, err = libanubis.New(m.Options) if err != nil { return err } return nil } func (m *AnubisMiddleware) ServeHTTP(w http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error { remoteHost, _, err := net.SplitHostPort(r.RemoteAddr) if err != nil { return err } r.Header.Set("X-Real-Ip", remoteHost) m.next = next m.anubis.ServeHTTP(w, r) return nil } func (m *AnubisMiddleware) UnmarshalCaddyfile(d *caddyfile.Dispenser) error { d.Next() m.DefaultDifficulty = anubis.DefaultDifficulty for nesting := d.Nesting(); d.NextBlock(nesting); { switch d.Val() { case "target": } } // anubis options if d.NextArg() { return d.ArgErr() } // too many args return nil } func parseCaddyfileHandler(h httpcaddyfile.Helper) (caddyhttp.MiddlewareHandler, error) { var m AnubisMiddleware err := m.UnmarshalCaddyfile(h.Dispenser) return &m, err }