This commit adds TLS capabilities for the custom port selected to pro…

…vide prometheus node exporter. The changes have been performed by enhancing the already existing modes of operation for the uhttpd server. By merging this commit, the /etc/config/prometheus-node-exporter-lua file receives another two options, which allow the configuration of independent keys and certificate for the uhttpd server. Signed-off-by: Thomas Rahimi <[email protected]>
openwrt · Dec 15, 2024 · 16f6ad8 · 16f6ad8
1 parent 0d478f6
commit 16f6ad8
Show file tree

Hide file tree

Showing 2 changed files with 50 additions and 3 deletions.
diff --git a/utils/prometheus-node-exporter-lua/files/etc/config/prometheus-node-exporter-lua b/utils/prometheus-node-exporter-lua/files/etc/config/prometheus-node-exporter-lua
@@ -1,3 +1,5 @@
 config prometheus-node-exporter-lua 'main'
 	option listen_interface 'loopback'
 	option listen_port '9100'
+	option cert_path 'none'
+	option key_path 'none'
diff --git a/utils/prometheus-node-exporter-lua/files/etc/init.d/prometheus-node-exporter-lua b/utils/prometheus-node-exporter-lua/files/etc/init.d/prometheus-node-exporter-lua
@@ -33,10 +33,55 @@ start_service() {
 	[ $keepalive -gt 0 ] && procd_append_param command -k $keepalive
 
 	if [ "$interface" = "*" ]; then
-		procd_append_param command -p $port
+		if [ "$cert_path" = "none" ] && [ "$key_path" = "none" ]; then
+			procd_append_param command -p $port
+		elif [ "$cert_path" = "none" ] && [ "$key_path" != "none" ]; then
+			procd_append_param command -p $port
+		elif [ "$cert_path" != "none" ] && [ "$key_path" = "none" ]; then
+			procd_append_param command -p $port
+		elif [ "$cert_path" != "none" ] && [ "$key_path" != "none" ]; then
+			if [ -f "$cert_path" ] && [ -f "$key_path" ]; then
+				procd_append_param command -C $cert_path -K $key_path -s $port
+			elif [ ! -f "$cert_path" ]; then
+				_log "No cert file found under path: $cert_path"
+				return 0
+			elif [ ! -f "$key_path" ]; then
+				_log "No key file found under path: $key_path"
+				return 0
+			else
+				_log "Error setting up TLS"
+				return 0
+			fi
+		else
+			procd_append_param command -p $port
+		fi
 	else
-		[ -n "$bind4" ] && procd_append_param command -p $bind4:$port
-		[ -n "$bind6" ] && procd_append_param command -p [$bind6]:$port
+		if [ "$cert_path" = "none" ] && [ "$key_path" = "none" ]; then
+			procd_append_param command -p $bind4:$port
+			procd_append_param command -p [$bind6]:$port
+		elif [ "$cert_path" = "none" ] && [ "$key_path" != "none" ]; then
+			procd_append_param command -p $bind4:$port
+			procd_append_param command -p [$bind6]:$port
+		elif [ "$cert_path" != "none" ] && [ "$key_path" = "none" ]; then
+			procd_append_param command -p $bind4:$port
+			procd_append_param command -p [$bind6]:$port
+		elif [ "$cert_path" != "none" ] && [ "$key_path" != "none" ]; then
+			if [ -f "$cert_path" ] && [ -f "$key_path" ]; then
+				procd_append_param command -C $cert_path -K $key_path -s $bind4:$port
+				procd_append_param command -C $cert_path -K $key_path -s [$bind6]:$port
+			elif [ ! -f "$cert_path" ]; then
+				_log "No cert file found under path: $cert_path"
+				return 0
+			elif [ ! -f "$key_path" ]; then
+				_log "No key file found under path: $key_path"
+				return 0
+			else
+				_log "Error setting up TLS"
+				return 0
+			fi
+		else
+			procd_append_param command -p $port
+		fi
 	fi
 
 	procd_set_param stdout 1