mirror of
https://github.com/tale/headplane.git
synced 2026-08-24 11:36:31 +00:00
feat: switch to a central singleton handler
This also adds support for Headscale TLS installations
This commit is contained in:
+1
-12
@@ -1,22 +1,11 @@
|
||||
import type { HostInfo } from '~/types';
|
||||
import { TimedCache } from '~server/ws/cache';
|
||||
import { hp_agentRequest, hp_getAgentCache } from '~server/ws/data';
|
||||
import { hp_getAgents } from '~server/ws/socket';
|
||||
import { hp_getConfig } from './loader';
|
||||
import type { HeadplaneConfig } from './parser';
|
||||
import { hp_agentRequest } from '~server/ws/data';
|
||||
|
||||
export interface AppContext {
|
||||
context: HeadplaneConfig;
|
||||
hp_agentRequest: typeof hp_agentRequest;
|
||||
agents: string[];
|
||||
agentData?: TimedCache<HostInfo>;
|
||||
}
|
||||
|
||||
export default function appContext(): AppContext {
|
||||
return {
|
||||
context: hp_getConfig(),
|
||||
hp_agentRequest,
|
||||
agents: [...hp_getAgents().keys()],
|
||||
agentData: hp_getAgentCache(),
|
||||
};
|
||||
}
|
||||
|
||||
@@ -0,0 +1,85 @@
|
||||
import type { Configuration } from 'openid-client';
|
||||
import type { Agent } from 'undici';
|
||||
import type { WebSocket } from 'ws';
|
||||
import type { HostInfo } from '~/types';
|
||||
import type { HeadplaneConfig } from '~server/context/parser';
|
||||
import type { Logger } from '~server/utils/log';
|
||||
import type { TimedCache } from '~server/ws/cache';
|
||||
|
||||
// This is a stupid workaround for how the Remix import context works
|
||||
// Even though they run in the same Node instance, they have different
|
||||
// contexts which means importing this in the app code will not work
|
||||
// because it will be a different instance of the module.
|
||||
//
|
||||
// Instead we can rely on globalThis to share the module between the
|
||||
// different contexts and use some helper functions to make it easier.
|
||||
// As a part of this global module, we also define all our singletons
|
||||
// here in order to avoid polluting the global scope and instead just using
|
||||
// the `__headplane_server_context` object.
|
||||
|
||||
interface ServerContext {
|
||||
config: HeadplaneConfig;
|
||||
singletons: ServerSingletons;
|
||||
}
|
||||
|
||||
interface ServerSingletons {
|
||||
api_agent: Agent;
|
||||
logger: Logger;
|
||||
oidc_client: Configuration;
|
||||
ws_agents: Map<string, WebSocket>;
|
||||
ws_agent_data: TimedCache<HostInfo>;
|
||||
ws_fetch_data: (nodeList: string[]) => Promise<void>;
|
||||
}
|
||||
|
||||
// These declarations are separate to prevent the Remix context
|
||||
// from modifying the globalThis object and causing issues with
|
||||
// the server context.
|
||||
declare namespace globalThis {
|
||||
let __headplane_server_context: {
|
||||
[K in keyof ServerContext]: ServerContext[K] | null | object;
|
||||
};
|
||||
}
|
||||
|
||||
// We need to check if the context is already initialized and set a default
|
||||
// value. This is fine as a side-effect since it's just setting up a framework
|
||||
// for the object to get modified later.
|
||||
if (!globalThis.__headplane_server_context) {
|
||||
globalThis.__headplane_server_context = {
|
||||
config: null,
|
||||
singletons: {},
|
||||
};
|
||||
}
|
||||
|
||||
declare global {
|
||||
const __headplane_server_context: ServerContext;
|
||||
}
|
||||
|
||||
export function hp_getConfig(): HeadplaneConfig {
|
||||
return __headplane_server_context.config;
|
||||
}
|
||||
|
||||
export function hp_setConfig(config: HeadplaneConfig): void {
|
||||
__headplane_server_context.config = config;
|
||||
}
|
||||
|
||||
export function hp_getSingleton<T extends keyof ServerSingletons>(
|
||||
key: T,
|
||||
): ServerSingletons[T] {
|
||||
if (!__headplane_server_context.singletons[key]) {
|
||||
throw new Error(`Singleton ${key} not initialized`);
|
||||
}
|
||||
|
||||
return __headplane_server_context.singletons[key];
|
||||
}
|
||||
|
||||
export function hp_getSingletonUnsafe<T extends keyof ServerSingletons>(
|
||||
key: T,
|
||||
): ServerSingletons[T] | undefined {
|
||||
return __headplane_server_context.singletons[key];
|
||||
}
|
||||
|
||||
export function hp_setSingleton<
|
||||
T extends ServerSingletons[keyof ServerSingletons],
|
||||
>(key: keyof ServerSingletons, value: T): void {
|
||||
(__headplane_server_context.singletons[key] as T) = value;
|
||||
}
|
||||
@@ -1,21 +0,0 @@
|
||||
import { HeadplaneConfig } from './parser';
|
||||
|
||||
declare global {
|
||||
const __cookie_context: {
|
||||
cookie_secret: string;
|
||||
cookie_secure: boolean;
|
||||
};
|
||||
|
||||
const __hs_context: {
|
||||
url: string;
|
||||
config_path?: string;
|
||||
config_strict?: boolean;
|
||||
};
|
||||
|
||||
const __oidc_context: {
|
||||
valid: boolean;
|
||||
secret: string;
|
||||
};
|
||||
|
||||
let __integration_context: HeadplaneConfig['integration'];
|
||||
}
|
||||
+26
-59
@@ -2,32 +2,14 @@ import { constants, access, readFile } from 'node:fs/promises';
|
||||
import { env } from 'node:process';
|
||||
import { type } from 'arktype';
|
||||
import dotenv from 'dotenv';
|
||||
import { Agent } from 'undici';
|
||||
import { parseDocument } from 'yaml';
|
||||
import { getOidcSecret, testOidc } from '~/utils/oidc';
|
||||
import log, { hpServer_loadLogger } from '~server/utils/log';
|
||||
import { testOidc } from '~/utils/oidc';
|
||||
import log, { hp_loadLogger } from '~server/utils/log';
|
||||
import mutex from '~server/utils/mutex';
|
||||
import { hp_setConfig, hp_setSingleton } from './global';
|
||||
import { HeadplaneConfig, coalesceConfig, validateConfig } from './parser';
|
||||
|
||||
declare namespace globalThis {
|
||||
let __cookie_context: {
|
||||
cookie_secret: string;
|
||||
cookie_secure: boolean;
|
||||
};
|
||||
|
||||
let __hs_context: {
|
||||
url: string;
|
||||
config_path?: string;
|
||||
config_strict?: boolean;
|
||||
};
|
||||
|
||||
let __oidc_context: {
|
||||
valid: boolean;
|
||||
secret: string;
|
||||
};
|
||||
|
||||
let __integration_context: HeadplaneConfig['integration'];
|
||||
}
|
||||
|
||||
const envBool = type('string | undefined').pipe((v) => {
|
||||
return ['1', 'true', 'yes', 'on'].includes(v?.toLowerCase() ?? '');
|
||||
});
|
||||
@@ -39,30 +21,12 @@ const rootEnvs = type({
|
||||
}).onDeepUndeclaredKey('reject');
|
||||
|
||||
const HEADPLANE_DEFAULT_CONFIG_PATH = '/etc/headplane/config.yaml';
|
||||
let runtimeConfig: HeadplaneConfig | undefined = undefined;
|
||||
const runtimeLock = mutex();
|
||||
|
||||
// We need to acquire here to ensure that the configuration is loaded
|
||||
// properly. We can't request a configuration if its in the process
|
||||
// of being updated.
|
||||
export function hp_getConfig() {
|
||||
runtimeLock.acquire();
|
||||
if (!runtimeConfig) {
|
||||
runtimeLock.release();
|
||||
// This shouldn't be possible, we NEED to have a configuration
|
||||
throw new Error('Configuration not loaded');
|
||||
}
|
||||
|
||||
const config = runtimeConfig;
|
||||
runtimeLock.release();
|
||||
return config;
|
||||
}
|
||||
|
||||
// hp_loadConfig should ONLY be called when we explicitly need to reload
|
||||
// the configuration. This should be done when the configuration file
|
||||
// changes and we ignore environment variable changes.
|
||||
//
|
||||
// To read the config hp_getConfig should be used.
|
||||
// TODO: File watching for hp_loadConfig()
|
||||
export async function hp_loadConfig() {
|
||||
runtimeLock.acquire();
|
||||
@@ -84,7 +48,7 @@ export async function hp_loadConfig() {
|
||||
}
|
||||
|
||||
// Load our debug based logger before ANYTHING
|
||||
hpServer_loadLogger(envs.HEADPLANE_DEBUG_LOG);
|
||||
await hp_loadLogger(envs.HEADPLANE_DEBUG_LOG);
|
||||
if (envs.HEADPLANE_CONFIG_PATH) {
|
||||
path = envs.HEADPLANE_CONFIG_PATH;
|
||||
}
|
||||
@@ -133,28 +97,31 @@ export async function hp_loadConfig() {
|
||||
if (!result) {
|
||||
log.error('CFGX', 'OIDC configuration failed validation, disabling');
|
||||
}
|
||||
|
||||
globalThis.__oidc_context = {
|
||||
valid: result,
|
||||
secret: getOidcSecret() ?? '',
|
||||
};
|
||||
}
|
||||
}
|
||||
|
||||
globalThis.__cookie_context = {
|
||||
cookie_secret: config.server.cookie_secret,
|
||||
cookie_secure: config.server.cookie_secure,
|
||||
};
|
||||
if (config.headscale.tls_cert_path) {
|
||||
log.debug('CFGX', 'Attempting to load supplied Headscale TLS cert');
|
||||
try {
|
||||
const data = await readFile(config.headscale.tls_cert_path, 'utf8');
|
||||
log.info('CFGX', 'Headscale TLS cert loaded successfully');
|
||||
hp_setSingleton(
|
||||
'api_agent',
|
||||
new Agent({
|
||||
connect: {
|
||||
ca: data.trim(),
|
||||
},
|
||||
}),
|
||||
);
|
||||
} catch (error) {
|
||||
log.error('CFGX', 'Failed to load Headscale TLS cert');
|
||||
log.debug('CFGX', 'Error Details: %o', error);
|
||||
}
|
||||
} else {
|
||||
hp_setSingleton('api_agent', new Agent());
|
||||
}
|
||||
|
||||
globalThis.__hs_context = {
|
||||
url: config.headscale.url,
|
||||
config_path: config.headscale.config_path,
|
||||
config_strict: config.headscale.config_strict,
|
||||
};
|
||||
|
||||
globalThis.__integration_context = config.integration;
|
||||
|
||||
runtimeConfig = config;
|
||||
hp_setConfig(config);
|
||||
runtimeLock.release();
|
||||
}
|
||||
|
||||
|
||||
+3
-2
@@ -1,11 +1,12 @@
|
||||
import { constants, access } from 'node:fs/promises';
|
||||
import { createServer } from 'node:http';
|
||||
import { WebSocketServer } from 'ws';
|
||||
import { hp_getConfig, hp_loadConfig } from '~server/context/loader';
|
||||
import { hp_getConfig } from '~server/context/global';
|
||||
import { hp_loadConfig } from '~server/context/loader';
|
||||
import { listener } from '~server/listener';
|
||||
import log from '~server/utils/log';
|
||||
import { hp_loadAgentCache } from '~server/ws/data';
|
||||
import { initWebsocket } from '~server/ws/socket';
|
||||
import log from './utils/log';
|
||||
|
||||
log.info('SRVX', 'Running Node.js %s', process.versions.node);
|
||||
|
||||
|
||||
+32
-16
@@ -1,19 +1,45 @@
|
||||
export function hpServer_loadLogger(debug: boolean) {
|
||||
import {
|
||||
hp_getSingleton,
|
||||
hp_getSingletonUnsafe,
|
||||
hp_setSingleton,
|
||||
} from '~server/context/global';
|
||||
|
||||
export interface Logger {
|
||||
info: (category: string, message: string, ...args: unknown[]) => void;
|
||||
warn: (category: string, message: string, ...args: unknown[]) => void;
|
||||
error: (category: string, message: string, ...args: unknown[]) => void;
|
||||
debug: (category: string, message: string, ...args: unknown[]) => void;
|
||||
}
|
||||
|
||||
export function hp_loadLogger(debug: boolean) {
|
||||
const newLog = { ...log };
|
||||
if (debug) {
|
||||
log.debug = (category: string, message: string, ...args: unknown[]) => {
|
||||
newLog.debug = (category: string, message: string, ...args: unknown[]) => {
|
||||
defaultLog('DEBG', category, message, ...args);
|
||||
};
|
||||
|
||||
log.info('CFGX', 'Debug logging enabled');
|
||||
log.info(
|
||||
newLog.info('CFGX', 'Debug logging enabled');
|
||||
newLog.info(
|
||||
'CFGX',
|
||||
'This is very verbose and should only be used for debugging purposes',
|
||||
);
|
||||
log.info(
|
||||
newLog.info(
|
||||
'CFGX',
|
||||
'If you run this in production, your storage COULD fill up quickly',
|
||||
);
|
||||
}
|
||||
|
||||
hp_setSingleton('logger', newLog);
|
||||
}
|
||||
|
||||
function defaultLog(
|
||||
level: string,
|
||||
category: string,
|
||||
message: string,
|
||||
...args: unknown[]
|
||||
) {
|
||||
const date = new Date().toISOString();
|
||||
console.log(`${date} (${level}) [${category}] ${message}`, ...args);
|
||||
}
|
||||
|
||||
const log = {
|
||||
@@ -32,14 +58,4 @@ const log = {
|
||||
debug: (category: string, message: string, ...args: unknown[]) => {},
|
||||
};
|
||||
|
||||
function defaultLog(
|
||||
level: string,
|
||||
category: string,
|
||||
message: string,
|
||||
...args: unknown[]
|
||||
) {
|
||||
const date = new Date().toISOString();
|
||||
console.log(`${date} (${level}) [${category}] ${message}`, ...args);
|
||||
}
|
||||
|
||||
export default log;
|
||||
export default hp_getSingletonUnsafe('logger') ?? log;
|
||||
|
||||
+9
-8
@@ -1,10 +1,13 @@
|
||||
import { open } from 'node:fs/promises';
|
||||
import type { HostInfo } from '~/types';
|
||||
import {
|
||||
hp_getSingleton,
|
||||
hp_getSingletonUnsafe,
|
||||
hp_setSingleton,
|
||||
} from '~server/context/global';
|
||||
import log from '~server/utils/log';
|
||||
import { TimedCache } from './cache';
|
||||
import { hp_getAgents } from './socket';
|
||||
|
||||
let cache: TimedCache<HostInfo> | undefined;
|
||||
export async function hp_loadAgentCache(defaultTTL: number, filepath: string) {
|
||||
log.debug('CACH', `Loading agent cache from ${filepath}`);
|
||||
|
||||
@@ -17,18 +20,16 @@ export async function hp_loadAgentCache(defaultTTL: number, filepath: string) {
|
||||
return;
|
||||
}
|
||||
|
||||
cache = new TimedCache(defaultTTL, filepath);
|
||||
}
|
||||
|
||||
export function hp_getAgentCache() {
|
||||
return cache;
|
||||
const cache = new TimedCache<HostInfo>(defaultTTL, filepath);
|
||||
hp_setSingleton('ws_agent_data', cache);
|
||||
}
|
||||
|
||||
export async function hp_agentRequest(nodeList: string[]) {
|
||||
// Request to all connected agents (we can have multiple)
|
||||
// Luckily we can parse all the data at once through message parsing
|
||||
// and then overlapping cache entries will be overwritten by time
|
||||
const agents = hp_getAgents();
|
||||
const agents = hp_getSingleton('ws_agents');
|
||||
const cache = hp_getSingletonUnsafe('ws_agent_data');
|
||||
|
||||
// Deduplicate the list of nodes
|
||||
const NodeIDs = [...new Set(nodeList)];
|
||||
|
||||
+6
-5
@@ -1,8 +1,14 @@
|
||||
import WebSocket, { WebSocketServer } from 'ws';
|
||||
import { hp_setSingleton } from '~server/context/global';
|
||||
import log from '~server/utils/log';
|
||||
import { hp_agentRequest } from './data';
|
||||
|
||||
export function initWebsocket(server: WebSocketServer, authKey: string) {
|
||||
log.info('SRVX', 'Starting a WebSocket server for agent connections');
|
||||
const agents = new Map<string, WebSocket>();
|
||||
hp_setSingleton('ws_agents', agents);
|
||||
hp_setSingleton('ws_fetch_data', hp_agentRequest);
|
||||
|
||||
server.on('connection', (ws, req) => {
|
||||
const tailnetID = req.headers['x-headplane-tailnet-id'];
|
||||
if (!tailnetID || typeof tailnetID !== 'string') {
|
||||
@@ -50,8 +56,3 @@ export function initWebsocket(server: WebSocketServer, authKey: string) {
|
||||
|
||||
return server;
|
||||
}
|
||||
|
||||
const agents = new Map<string, WebSocket>();
|
||||
export function hp_getAgents() {
|
||||
return agents;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user