canon/cmd/canon/main.go

// Command canon serves a personal, self-hosted collection of ranked
// favorites.
package main

import (
	"context"
	"crypto/rand"
	"errors"
	"fmt"
	"log/slog"
	"math/big"
	"net"
	"net/http"
	"os"
	"os/signal"
	"strings"
	"syscall"
	"time"

	"github.com/cdnutter/canon/internal/auth"
	"github.com/cdnutter/canon/internal/config"
	"github.com/cdnutter/canon/internal/imgcache"
	"github.com/cdnutter/canon/internal/providers"
	"github.com/cdnutter/canon/internal/server"
	"github.com/cdnutter/canon/internal/store"
)

// version is set at build time with -ldflags "-X main.version=…".
var version = "dev"

func main() {
	level := slog.LevelInfo
	if strings.EqualFold(os.Getenv("CANON_LOG_LEVEL"), "debug") {
		level = slog.LevelDebug
	}
	log := slog.New(slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{Level: level}))
	if err := run(log); err != nil {
		log.Error("fatal", "err", err)
		os.Exit(1)
	}
}

func run(log *slog.Logger) error {
	cfg := config.Load()
	if err := os.MkdirAll(cfg.DataDir, 0o755); err != nil {
		return fmt.Errorf("creating data dir: %w", err)
	}
	st, err := store.Open(cfg.DataDir)
	if err != nil {
		return fmt.Errorf("opening database: %w", err)
	}
	defer st.Close()
	images, err := imgcache.New(cfg.DataDir, providers.UserAgent)
	if err != nil {
		return fmt.Errorf("image cache: %w", err)
	}
	ver := version
	if ver == "dev" {
		ver = fmt.Sprintf("dev-%d", time.Now().Unix())
	}
	srv, err := server.New(cfg, st, images, log, ver)
	if err != nil {
		return err
	}

	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
	defer stop()

	if err := bootstrapAdmin(ctx, cfg, st, srv, log); err != nil {
		return err
	}

	go func() {
		t := time.NewTicker(6 * time.Hour)
		defer t.Stop()
		for {
			select {
			case <-ctx.Done():
				return
			case <-t.C:
				if err := st.PruneSessions(ctx); err != nil {
					log.Warn("pruning sessions", "err", err)
				}
			}
		}
	}()

	httpSrv := &http.Server{
		Addr:              cfg.ListenAddr,
		Handler:           srv.Handler(),
		ReadHeaderTimeout: 10 * time.Second,
		IdleTimeout:       120 * time.Second,
	}
	errc := make(chan error, 1)
	go func() {
		log.Info("Canon is running", "addr", cfg.ListenAddr, "data", cfg.DataDir, "version", version)
		logURLs(log, cfg)
		errc <- httpSrv.ListenAndServe()
	}()
	select {
	case err := <-errc:
		if !errors.Is(err, http.ErrServerClosed) {
			return err
		}
	case <-ctx.Done():
		log.Info("shutting down")
		shutdownCtx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
		defer cancel()
		return httpSrv.Shutdown(shutdownCtx)
	}
	return nil
}

// bootstrapAdmin creates the owner account from the environment, or else
// prints a one-time code that's required to claim the instance in the
// browser, so a stranger can't get there first.
func bootstrapAdmin(ctx context.Context, cfg config.Config, st *store.Store, srv *server.Server, log *slog.Logger) error {
	n, err := st.UserCount(ctx)
	if err != nil || n > 0 {
		return err
	}
	if cfg.AdminUsername != "" && cfg.AdminPassword != "" {
		if len(cfg.AdminPassword) < auth.MinPasswordLength {
			return fmt.Errorf("CANON_ADMIN_PASSWORD must be at least %d characters", auth.MinPasswordLength)
		}
		hash, err := auth.HashPassword(cfg.AdminPassword)
		if err != nil {
			return err
		}
		if err := st.CreateUser(ctx, cfg.AdminUsername, hash); err != nil {
			return err
		}
		log.Info("created admin account from environment", "username", cfg.AdminUsername)
		return nil
	}
	code := setupCode()
	srv.SetSetupCode(code)
	log.Info("no admin account yet: open /setup in your browser and enter this setup code", "code", code)
	return nil
}

func setupCode() string {
	const alphabet = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789"
	b := make([]byte, 8)
	for i := range b {
		n, err := rand.Int(rand.Reader, big.NewInt(int64(len(alphabet))))
		if err != nil {
			panic(err)
		}
		b[i] = alphabet[n.Int64()]
	}
	return string(b[:4]) + "-" + string(b[4:])
}

// logURLs prints the addresses other devices can use to reach Canon.
func logURLs(log *slog.Logger, cfg config.Config) {
	if cfg.Host != "0.0.0.0" && cfg.Host != "" && cfg.Host != "::" {
		log.Info("open Canon at", "url", "http://"+net.JoinHostPort(cfg.Host, cfg.Port))
		return
	}
	// Inside Docker the container's own addresses aren't reachable from the
	// network; the host's address and published port are what matter.
	if _, err := os.Stat("/.dockerenv"); err == nil {
		log.Info("listening on all interfaces; open http://<this computer's IP>:<published port> from any device on your network")
		return
	}
	log.Info("open Canon at", "url", "http://localhost:"+cfg.Port)
	ifaces, err := net.Interfaces()
	if err != nil {
		return
	}
	for _, iface := range ifaces {
		// Skip interfaces that are down and container/VM bridges, which
		// other devices can't reach.
		if iface.Flags&net.FlagUp == 0 || iface.Flags&net.FlagLoopback != 0 || isVirtualBridge(iface.Name) {
			continue
		}
		addrs, err := iface.Addrs()
		if err != nil {
			continue
		}
		for _, a := range addrs {
			ipnet, ok := a.(*net.IPNet)
			if !ok || ipnet.IP.To4() == nil || ipnet.IP.IsLinkLocalUnicast() {
				continue
			}
			log.Info("open Canon on your network at", "url", "http://"+net.JoinHostPort(ipnet.IP.String(), cfg.Port))
		}
	}
}

func isVirtualBridge(name string) bool {
	for _, prefix := range []string{"docker", "br-", "veth", "virbr", "cni", "flannel", "podman"} {
		if strings.HasPrefix(name, prefix) {
			return true
		}
	}
	return false
}