PKGBUILD

@@ -1,5 +1,5 @@
 pkgname=gonx
-pkgver=0.0.5
+pkgver=0.0.3
 pkgrel=1
 pkgdesc='Simple reverse proxy server'
 arch=('x86_64' 'aarch64')
@@ -11,13 +11,13 @@ sha256sums=('SKIP')
 backup=("etc/$pkgname.conf")
 
 build() {
-	cd $pkgname
+	cd "$pkgname"
-	go build -o $pkgname -ldflags "-linkmode=external -s -w" -buildmode=pie -trimpath -mod=readonly -modcacherw
+	go build -o "$pkgname" -ldflags "-linkmode=external -s -w" -buildmode=pie -trimpath  -mod=readonly -modcacherw
 }
 
 package() {
 	cd "$pkgname"
-	install -Dm755 $pkgname         $pkgdir/usr/bin/$pkgname
+	install -Dm755 "$pkgname" "$pkgdir"/usr/bin/$pkgname
-	install -Dm644 $pkgname.conf    $pkgdir/etc/$pkgname.conf
+	install -Dm644 "$pkgname.conf" "$pkgdir/etc/$pkgname.conf"
-	install -Dm755 $pkgname.service $pkgdir/usr/lib/systemd/system/$pkgname.service
+	install -Dm755 $pkgname.service "$pkgdir"/usr/lib/systemd/system/$pkgname.service
 }

README.md

@@ -27,6 +27,5 @@ AcmeChallengePath = "/var/lib/letsencrypt" # Path for ACME challenge files
 # Map of hostname -> redirect URL
 [TLS]
 "git.host.com" = "tcp://127.0.0.1:8001" # TCP redirect
-"unix.host.com" = "unix:///var/lib/app/app.socket" # serve unix socket
 "www.host.com" = "file:///srv/http"     # simple static file server from `/srv/http`
 ```

gonx.conf

@@ -7,4 +7,3 @@ AcmeChallengePath = "/var/lib/letsencrypt" # Path for ACME challenge files
 [TLS]
 # "www.example.com" = "file:/srv/http"
 # "git.example.com" = "tcp://127.0.0.1:8001"
-# "unix.example.com" = "unix:///var/lib/app/app.socket"

gonx.service

@@ -40,7 +40,7 @@ UMask=0027
 ProtectProc=noaccess
 ProcSubset=pid
 SystemCallFilter=~@clock @swap @reboot @raw-io @privileged @obsolete @mount @module @debug @cpu-emulation
-RestrictAddressFamilies=~AF_PACKET AF_NETLINK
+RestrictAddressFamilies=~AF_UNIX AF_PACKET AF_NETLINK
 UMask=0066
 
 [Install]

main.go

@@ -38,21 +38,17 @@ func main() {
 		os.Exit(1)
 	}
 
-	if len(config.TLS) > 0 {
 	err = app.restartTlsListener()
 	if err != nil {
 		slog.Error("Failed to start TLS listener", slog.String("err", err.Error()))
 		os.Exit(1)
 	}
-	} else {
-		slog.Warn("TLS listener does not started because TLS redirection rules is empty")
-	}
 
 	go func() {
 		slog.Debug("Starting HTTP listener", slog.String("addr", config.HttpListenAddr))
 
 		smux := http.NewServeMux()
-		smux.Handle(defaultAcmeChallengePath, http.FileServer(http.Dir(config.AcmeChallengePath)))
+		smux.Handle(defaultAcmeChallengePath, http.StripPrefix(defaultAcmeChallengePath, http.FileServer(http.Dir(config.AcmeChallengePath))))
 		smux.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
 			http.Redirect(w, r, "https://"+r.Host+r.RequestURI, http.StatusMovedPermanently)
 		})

mapping.go

@@ -30,8 +30,8 @@ func (h HostMapping) Add(host, outputUrlStr string) error {
 	switch outputUrl.Scheme {
 	case "file":
 		server := http.Server{Handler: http.FileServer(http.Dir(outputUrl.Path))}
-		go server.Serve(pd.listener)
+		go func() { _ = server.Serve(pd.listener) }()
-	case "tcp", "unix":
+	case "tcp":
 		go func(pd ProxyDirection) {
 			for {
 				conn, err := pd.listener.Accept()
@@ -39,7 +39,7 @@ func (h HostMapping) Add(host, outputUrlStr string) error {
 					slog.Debug(err.Error())
 					continue
 				}
-				go handleListener(conn.(*tls.Conn), pd.Output)
+				go func() { _ = handleProxy(conn.(*tls.Conn), pd.Output) }()
 			}
 		}(pd)
 	default:
@@ -68,14 +68,10 @@ func handleTlsConn(conn *tls.Conn, hosts HostMapping) error {
 	return nil
 }
 
-func handleListener(conn *tls.Conn, outputUrl *url.URL) {
+func handleProxy(conn *tls.Conn, outputUrl *url.URL) error {
-	slog.Debug(fmt.Sprintf("%s -> %s", conn.RemoteAddr(), outputUrl.Host+outputUrl.Path))
+	c, err := net.Dial(outputUrl.Scheme, outputUrl.Host)
-
-	c, err := net.Dial(outputUrl.Scheme, outputUrl.Host+outputUrl.Path)
 	if err != nil {
-		fmt.Fprintf(conn, "HTTP/1.1 500 Internal Server Error\r\nConnection: Close\r\nContent-Type: text/plain\r\n\r\n%s", err)
+		return fmt.Errorf("dial: %v", err)
-		conn.Close()
-		return
 	}
 	defer c.Close()
 
@@ -95,4 +91,6 @@ func handleListener(conn *tls.Conn, outputUrl *url.URL) {
 	}()
 
 	wg.Wait()
+
+	return nil
 }