using System;
using System.Collections.Generic;
using System.IO;
using System.Net;
using System.Security.Cryptography.X509Certificates;
using Jellyfin.Server.Helpers;
using MediaBrowser.Common.Configuration;
using MediaBrowser.Controller.Extensions;
using MediaBrowser.Model.Net;
using Microsoft.AspNetCore.Hosting;
using Microsoft.AspNetCore.Server.Kestrel.Core;
using Microsoft.Extensions.Configuration;
using Microsoft.Extensions.Hosting;
using Microsoft.Extensions.Logging;
namespace Jellyfin.Server.Extensions;
///
/// Extensions for configuring the web host builder.
///
public static class WebHostBuilderExtensions
{
///
/// Configure the web host builder.
///
/// The builder to configure.
/// The application host.
/// The application configuration.
/// The application paths.
/// The logger.
/// The configured web host builder.
public static IWebHostBuilder ConfigureWebHostBuilder(
this IWebHostBuilder builder,
CoreAppHost appHost,
IConfiguration startupConfig,
IApplicationPaths appPaths,
ILogger logger)
{
return builder
.UseKestrel((builderContext, options) =>
{
SetupJellyfinWebServer(
appHost.NetManager.GetAllBindInterfaces(false),
appHost.HttpPort,
appHost.ListenWithHttps ? appHost.HttpsPort : null,
appHost.Certificate,
startupConfig,
appPaths,
logger,
builderContext,
options);
})
.UseStartup(context => new Startup(appHost, context.Configuration));
}
///
/// Configures a Kestrel type webServer to bind to the specific arguments.
///
/// The IP addresses that should be listend to.
/// The http port.
/// If set the https port. If set you must also set the certificate.
/// The certificate used for https port.
/// The startup config.
/// The app paths.
/// A logger.
/// The kestrel build pipeline context.
/// The kestrel server options.
/// Will be thrown when a https port is set but no or an invalid certificate is provided.
public static void SetupJellyfinWebServer(
IReadOnlyList addresses,
int httpPort,
int? httpsPort,
X509Certificate2? certificate,
IConfiguration startupConfig,
IApplicationPaths appPaths,
ILogger logger,
WebHostBuilderContext builderContext,
KestrelServerOptions options)
{
bool flagged = false;
foreach (var netAdd in addresses)
{
var address = netAdd.Address;
logger.LogInformation("Kestrel is listening on {Address}", address.Equals(IPAddress.IPv6Any) ? "all interfaces" : address);
options.Listen(netAdd.Address, httpPort);
if (httpsPort.HasValue)
{
if (builderContext.HostingEnvironment.IsDevelopment())
{
try
{
options.Listen(
address,
httpsPort.Value,
listenOptions => listenOptions.UseHttps());
}
catch (InvalidOperationException)
{
if (!flagged)
{
logger.LogWarning("Failed to listen to HTTPS using the ASP.NET Core HTTPS development certificate. Please ensure it has been installed and set as trusted");
flagged = true;
}
}
}
else
{
if (certificate is null)
{
throw new InvalidOperationException("Cannot run jellyfin with https without setting a valid certificate.");
}
options.Listen(
address,
httpsPort.Value,
listenOptions => listenOptions.UseHttps(certificate));
}
}
}
// Bind to unix socket (only on unix systems)
if (startupConfig.UseUnixSocket() && Environment.OSVersion.Platform == PlatformID.Unix)
{
var socketPath = StartupHelpers.GetUnixSocketPath(startupConfig, appPaths);
// Workaround for https://github.com/aspnet/AspNetCore/issues/14134
if (File.Exists(socketPath))
{
File.Delete(socketPath);
}
options.ListenUnixSocket(socketPath);
logger.LogInformation("Kestrel listening to unix socket {SocketPath}", socketPath);
}
}
}