Function applySSL

agent/app/service/website_utils.go:819–966

(website *model.Website, websiteSSL model.WebsiteSSL, req request.WebsiteHTTPSOp)

}

func applySSL(website *model.Website, websiteSSL model.WebsiteSSL, req request.WebsiteHTTPSOp) error {
	nginxFull, err := getNginxFull(website)
	if err != nil {
		return nil
	}
	domains, err := websiteDomainRepo.GetBy(websiteDomainRepo.WithWebsiteId(website.ID))
	if err != nil {
		return nil
	}
	httpPorts := make(map[int]struct{})
	httpsPorts := make(map[int]struct{})
	sslPort := 0

	hasDefaultPort := false
	for _, domain := range domains {
		if domain.Port == nginxFull.Install.HttpPort {
			hasDefaultPort = true
		}
		if domain.SSL {
			httpsPorts[domain.Port] = struct{}{}
		} else {
			httpPorts[domain.Port] = struct{}{}
		}
	}
	if hasDefaultPort {
		httpsPorts[nginxFull.Install.HttpsPort] = struct{}{}
	}
	if len(httpsPorts) == 0 {
		for port := range httpPorts {
			httpsPorts[port] = struct{}{}
		}
	}
	config := nginxFull.SiteConfig.Config
	server := config.FindServers()[0]

	defaultHttpPort := strconv.Itoa(nginxFull.Install.HttpPort)
	defaultHttpPortIPV6 := "[::]:" + defaultHttpPort

	for port := range httpsPorts {
		sslPort = port
		portStr := strconv.Itoa(port)
		server.RemoveListenByBind(portStr)
		server.RemoveListenByBind("[::]:" + portStr)
		setListen(server, portStr, website.IPV6, req.Http3, website.DefaultServer, true)
	}

	server.UpdateDirective("http2", []string{"on"})

	switch req.HttpConfig {
	case constant.HTTPSOnly:
		server.RemoveListenByBind(defaultHttpPort)
		server.RemoveListenByBind(defaultHttpPortIPV6)
		server.RemoveDirective("if", []string{"($scheme"})
	case constant.HTTPToHTTPS:
		if hasDefaultPort {
			server.UpdateListen(defaultHttpPort, website.DefaultServer)
			if website.IPV6 {
				server.UpdateListen(defaultHttpPortIPV6, website.DefaultServer)