feat: warmup memory store when starting
This commit is contained in:
parent
3999723308
commit
48a421a3b6
2 changed files with 69 additions and 9 deletions
|
@ -145,6 +145,47 @@ impl CertStore {
|
|||
self.gen_self_signed_certificate(domain)
|
||||
}
|
||||
|
||||
pub async fn warmup_memory_store(self: &Arc<Self>) -> Result<()> {
|
||||
let consul_certs = self
|
||||
.consul
|
||||
.kv_get_prefix("certs/", None)
|
||||
.await?
|
||||
.into_inner();
|
||||
|
||||
trace!(
|
||||
"Fetched {} certificate entries from Consul",
|
||||
consul_certs.len()
|
||||
);
|
||||
let mut loaded_certs: usize = 0;
|
||||
for (domain, cert) in consul_certs {
|
||||
let certser: CertSer = match serde_json::from_slice(&cert) {
|
||||
Ok(cs) => cs,
|
||||
Err(e) => {
|
||||
warn!("Could not deserialize CertSer for {domain}: {e}");
|
||||
continue;
|
||||
}
|
||||
};
|
||||
|
||||
let cert = match Cert::new(certser) {
|
||||
Ok(c) => c,
|
||||
Err(e) => {
|
||||
warn!("Could not create Cert from CertSer for domain {domain}: {e}");
|
||||
continue;
|
||||
}
|
||||
};
|
||||
|
||||
self.certs
|
||||
.write()
|
||||
.unwrap()
|
||||
.insert(domain.to_string(), Arc::new(cert));
|
||||
|
||||
debug!("({domain}) Certificate loaded from Consul to the Memory Store");
|
||||
loaded_certs += 1;
|
||||
}
|
||||
info!("Memory store warmed up with {loaded_certs} certificates");
|
||||
Ok(())
|
||||
}
|
||||
|
||||
pub async fn check_cert(self: &Arc<Self>, domain: &str) -> Result<()> {
|
||||
// First, try locally.
|
||||
{
|
||||
|
@ -162,16 +203,23 @@ impl CertStore {
|
|||
.kv_get_json::<CertSer>(&format!("certs/{}", domain))
|
||||
.await?
|
||||
{
|
||||
if let Ok(cert) = Cert::new(consul_cert) {
|
||||
match Cert::new(consul_cert) {
|
||||
Ok(cert) => {
|
||||
let cert = Arc::new(cert);
|
||||
self.certs
|
||||
.write()
|
||||
.unwrap()
|
||||
.insert(domain.to_string(), cert.clone());
|
||||
debug!("({domain}) Certificate loaded from Consul to the Memory Store");
|
||||
|
||||
if !cert.is_old() {
|
||||
return Ok(());
|
||||
}
|
||||
}
|
||||
Err(e) => {
|
||||
warn!("Could not create Cert from CertSer for domain {domain}: {e}");
|
||||
}
|
||||
};
|
||||
}
|
||||
|
||||
// Third, ask from Let's Encrypt
|
||||
|
|
12
src/main.rs
12
src/main.rs
|
@ -101,6 +101,12 @@ struct Opt {
|
|||
default_value = "text/html,text/plain,text/css,text/javascript,text/xml,application/javascript,application/json,application/xml,image/svg+xml,font/ttf"
|
||||
)]
|
||||
pub compress_mime_types: String,
|
||||
|
||||
#[structopt(
|
||||
long = "warmup-cert-memory-store",
|
||||
env = "TRICOT_WARMUP_CERT_MEMORY_STORE"
|
||||
)]
|
||||
pub warmup_cert_memory_store: bool,
|
||||
}
|
||||
|
||||
#[tokio::main(flavor = "multi_thread", worker_threads = 10)]
|
||||
|
@ -154,6 +160,12 @@ async fn main() {
|
|||
opt.letsencrypt_email.clone(),
|
||||
exit_on_err.clone(),
|
||||
);
|
||||
if opt.warmup_cert_memory_store {
|
||||
match cert_store.warmup_memory_store().await {
|
||||
Err(e) => error!("An error occured while warming up the certificate memory store with Consul data, continue without caching: {e}"),
|
||||
_ => (),
|
||||
};
|
||||
}
|
||||
|
||||
let metrics_task = tokio::spawn(
|
||||
metrics_server
|
||||
|
|
Loading…
Reference in a new issue