main.go

package main

import (
	"crypto/tls"
	"fmt"
	"log"
	"log/slog"
	"net/http"
	"os"
	"time"

	"github.com/go-chi/chi/v5"
	"github.com/go-chi/chi/v5/middleware"
	"github.com/go-chi/cors"
	"github.com/go-chi/httprate"
	"github.com/humancorners/humancorners/apps/server/api"
	apiutil "github.com/humancorners/humancorners/apps/server/api/utils"
	"github.com/humancorners/humancorners/apps/server/moderation"
	"github.com/joho/godotenv"
)

func main() {
	if err := run(); err != nil {
		log.Fatal(err)
	}
}

func run() error {
	router := chi.NewRouter()

	production := os.Getenv("PRODUCTION") == "true"
	if production {
		godotenv.Load()
	} else {
		godotenv.Load(".env.local")
	}

	setupCORS(router)
	setupMiddlewares(router)
	setupRoutes(router)

	postsQueue, err := moderation.GetDiskQueue()
	if err != nil {
		return fmt.Errorf("could not start queue: %v", err)
	}
	defer postsQueue.Close()

	go moderation.ProcessQueue(postsQueue)

	port := getPort()
	slog.Info("Server running", "port", port)
	return http.ListenAndServe(":"+port, router)
}

func setupRoutes(router *chi.Mux) {
	api.CreateRoutes(router)
}

func setupMiddlewares(router *chi.Mux) {
	// recommended stack
	router.Use(middleware.RealIP)
	router.Use(middleware.RequestID)
	router.Use(middleware.Logger)
	router.Use(middleware.Recoverer)
	router.Use(middleware.Compress(5))

	// Skip TLS verification in development
	if os.Getenv("PRODUCTION") != "true" {
		http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{
			InsecureSkipVerify: true,
		}
	}

	// rate limiter
	router.Use(httprate.Limit(
		200,
		40*time.Second,
		httprate.WithKeyFuncs(httprate.KeyByIP, httprate.KeyByEndpoint),
		httprate.WithLimitHandler(func(w http.ResponseWriter, r *http.Request) {
			apiutil.ResponseWithError(w, http.StatusTooManyRequests, "Rate limited. Slow down.")
		}),
	))
}

func setupCORS(router *chi.Mux) {
	production := os.Getenv("PRODUCTION") == "true"

	corsOptions := cors.Options{
		AllowedMethods:   []string{"GET", "POST", "DELETE", "PUT", "OPTIONS"},
		AllowedHeaders:   []string{"Authorization", "Content-Type", "Accept", "Origin"},
		ExposedHeaders:   []string{"Link"},
		AllowCredentials: true,
		MaxAge:           300,
	}

	if production {
		corsOptions.AllowedOrigins = []string{
			"https://humancorners.com",
			"https://www.humancorners.com",
			"https://www.corners.club",
			"https://corners.club",
		}
	} else {
		// In development, enable the AllowOriginFunc to dynamically check the origin
		corsOptions.AllowOriginFunc = func(r *http.Request, origin string) bool {
			return true
		}
	}

	router.Use(cors.Handler(corsOptions))
}

func getPort() string {
	port := os.Getenv("PORT")
	if port == "" {
		slog.Warn("Could not get port from env, setting default to 8080")
		port = "8080"
	}
	return port
}