summaryrefslogtreecommitdiffstats
path: root/src/bin/server/main.rs
blob: f42574d8480659d408b01fc81132182d760216f7 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
mod args;
mod handler;
mod tls;

use std::net::TcpListener;
use std::sync::Arc;
use std::thread;

fn main() {
    let args = args::parse_args();

    if args.init {
        match zagan_bet::server::setup::init_identity(std::path::Path::new("."), "localhost") {
            Ok(report) => {
                println!("TLS identity created:");
                println!("  {} (PKCS#12, empty password)", report.identity.display());
                println!("  {} (private key)", report.key.display());
                println!("  {} (certificate)", report.cert.display());
                println!("\nStart the server with:\n  cargo run --bin server");
                println!("Clients will trust this certificate on first contact.");
            }
            Err(error) => {
                eprintln!("TLS setup failed:\n{error}");
                std::process::exit(1);
            }
        }
        return;
    }

    let listener = match TcpListener::bind(format!("{}:{}", args.ip, args.port)) {
        Ok(l) => l,
        Err(e) => {
            eprintln!("Failed to bind to {}:{}: {}", args.ip, args.port, e);
            std::process::exit(1);
        }
    };

    // A round cannot survive the process that held its state. Record any bet
    // that was reserved but never settled, before serving new players.
    let db_path = std::env::var("SERVER_DB").unwrap_or_else(|_| "server.db".to_string());
    match zagan_bet::server::core::recover_orphaned_reservations(&db_path) {
        Ok(0) => {}
        Ok(count) => {
            println!("Settled {count} orphaned reservation(s) as abandoned after a restart")
        }
        Err(error) => {
            eprintln!("Failed to settle orphaned reservations in {db_path}: {error}");
            std::process::exit(1);
        }
    }

    let tls = match tls::TlsServer::new("identity.p12") {
        Ok(t) => Arc::new(t),
        Err(e) => {
            eprintln!("Failed to initialize TLS: {}", e);
            std::process::exit(1);
        }
    };

    println!(
        "Server listening on {} (TLS enabled){}",
        listener.local_addr().unwrap(),
        if args.unsafe_mode {
            " [UNSAFE MODE]"
        } else {
            ""
        }
    );
    for stream in listener.incoming() {
        let stream = stream.unwrap();
        let tls = tls.clone();
        thread::spawn(move || match tls.accept(stream) {
            Ok(tls_stream) => {
                handler::handle_client_tls(tls_stream);
            }
            Err(e) => {
                eprintln!("TLS handshake failed: {}", e);
            }
        });
    }
}