headplane/app/server/app.ts

// MARK: Headplane Application
//
// Loads configuration, builds the per-process app context, and exports
// the React Router request listener as the default export.
//
// This module is consumed in two places:
//   - `app/server/main.ts` — the production bootstrap; wraps the
//     listener with static-asset serving and binds an http(s) server.
//   - `runtime/vite-plugin.ts` — the dev-mode Vite middleware; loads
//     this module through `ssrLoadModule` and dispatches each request.

import { exit, versions } from "node:process";

import { createRequestListener } from "@react-router/node";
import { RouterContextProvider } from "react-router";
import * as build from "virtual:react-router/server-build";

import log from "~/utils/log";

import type { HeadplaneConfig } from "./config/config-schema";
import { ConfigError } from "./config/error";
import { loadConfig } from "./config/load";
import {
  agentsContext,
  appConfigContext,
  authContext,
  createAppContext,
  dbContext,
  headscaleApiKeyContext,
  headscaleConfigContext,
  headscaleContext,
  headscaleLiveStoreContext,
  integrationContext,
  oidcContext,
  requestApiContext,
} from "./context";

log.info("server", "Running Node.js %s", versions.node);

let config: HeadplaneConfig;
try {
  config = await loadConfig();
} catch (error) {
  if (error instanceof ConfigError) {
    log.error("server", "Unable to load configuration: %s", error.message);
  } else {
    log.error("server", "Failed to load configuration: %s", error);
  }
  exit(1);
}

if ((config.server.tls_cert_path || config.server.tls_key_path) && !config.server.cookie_secure) {
  log.warn(
    "server",
    "TLS is enabled but `server.cookie_secure` is false; forcing it to true (browsers reject Secure-less cookies over HTTPS)",
  );
  config.server.cookie_secure = true;
}

const ctx = await createAppContext(config);
ctx.startServices();

export { config };

/**
 * Disposes the per-process context. Invoked by the production
 * supervisor on SIGTERM/SIGINT and by the dev Vite plugin on HMR
 * reload.
 */
export async function dispose(): Promise<void> {
  await ctx.dispose();
}

// TODO: `getLoadContext` is the right place to handle reverse proxy
// translation — better than doing it in the OIDC client because it
// applies to all requests, not just OIDC ones.
export default createRequestListener({
  build,
  mode: import.meta.env.MODE,
  getLoadContext: (request, client) => {
    ctx.auth.registerRequestClientAddress(request, client.address);

    const routerContext = new RouterContextProvider();
    routerContext.set(agentsContext, ctx.agents);
    routerContext.set(appConfigContext, ctx.config);
    routerContext.set(authContext, ctx.auth);
    routerContext.set(dbContext, ctx.db);
    routerContext.set(headscaleContext, ctx.headscale);
    routerContext.set(headscaleApiKeyContext, ctx.headscaleApiKey);
    routerContext.set(headscaleConfigContext, ctx.hs);
    routerContext.set(headscaleLiveStoreContext, ctx.hsLive);
    routerContext.set(integrationContext, ctx.integration);
    routerContext.set(oidcContext, ctx.oidc);
    routerContext.set(requestApiContext, ctx.apiForRequest);
    return routerContext;
  },
});