package main import ( "fmt" "github.com/asdine/storm" "github.com/filebrowser/filebrowser" "github.com/filebrowser/filebrowser/bolt" h "github.com/filebrowser/filebrowser/http" "github.com/filebrowser/filebrowser/staticgen" "github.com/hacdias/fileutils" flag "github.com/spf13/pflag" "github.com/spf13/viper" "gopkg.in/natefinch/lumberjack.v2" "io/ioutil" "log" "net" "net/http" "os" "path/filepath" "strings") var ( addr string config string database string scope string commands string logfile string staticg string locale string baseurl string prefixurl string viewMode string recaptchakey string recaptchasecret string port int auth struct { method string loginHeader string } noAuth bool allowCommands bool allowEdit bool allowNew bool allowPublish bool showVer bool alterRecaptcha bool ) func init() { flag.StringVarP(&config, "config", "c", "", "Configuration file") flag.IntVarP(&port, "port", "p", 0, "HTTP Port (default is random)") flag.StringVarP(&addr, "address", "a", "", "Address to listen to (default is all of them)") flag.StringVarP(&database, "database", "d", "./filebrowser.db", "Database file") flag.StringVarP(&logfile, "log", "l", "stdout", "Errors logger; can use 'stdout', 'stderr' or file") flag.StringVarP(&scope, "scope", "s", ".", "Default scope option for new users") flag.StringVarP(&baseurl, "baseurl", "b", "", "Base URL") flag.StringVar(&commands, "commands", "git svn hg", "Default commands option for new users") flag.StringVar(&prefixurl, "prefixurl", "", "Prefix URL") flag.StringVar(&viewMode, "view-mode", "mosaic", "Default view mode for new users") flag.StringVar(&recaptchakey, "recaptcha-key", "", "ReCaptcha site key") flag.StringVar(&recaptchasecret, "recaptcha-secret", "", "ReCaptcha secret") flag.BoolVar(&allowCommands, "allow-commands", true, "Default allow commands option for new users") flag.BoolVar(&allowEdit, "allow-edit", true, "Default allow edit option for new users") flag.BoolVar(&allowPublish, "allow-publish", true, "Default allow publish option for new users") flag.StringVar(&auth.method, "auth.method", "default", "Switch between 'none', 'default' and 'proxy' authentication.") flag.StringVar(&auth.loginHeader, "auth.loginHeader", "X-Forwarded-User", "The header name used for proxy authentication.") flag.BoolVar(&allowNew, "allow-new", true, "Default allow new option for new users") flag.BoolVar(&noAuth, "no-auth", false, "Disables authentication") flag.BoolVar(&alterRecaptcha, "alternative-recaptcha", false, "Use recaptcha.net for serving and handling, useful in China") flag.StringVar(&locale, "locale", "", "Default locale for new users, set it empty to enable auto detect from browser") flag.StringVar(&staticg, "staticgen", "", "Static Generator you want to enable") flag.BoolVarP(&showVer, "version", "v", false, "Show version") } func setupViper() { viper.SetDefault("Address", "") viper.SetDefault("Port", "0") viper.SetDefault("Database", "./filebrowser.db") viper.SetDefault("Scope", ".") viper.SetDefault("Logger", "stdout") viper.SetDefault("Commands", []string{"git", "svn", "hg"}) viper.SetDefault("AllowCommmands", true) viper.SetDefault("AllowEdit", true) viper.SetDefault("AllowNew", true) viper.SetDefault("AllowPublish", true) viper.SetDefault("StaticGen", "") viper.SetDefault("Locale", "") viper.SetDefault("AuthMethod", "default") viper.SetDefault("LoginHeader", "X-Fowarded-User") viper.SetDefault("NoAuth", false) viper.SetDefault("BaseURL", "") viper.SetDefault("PrefixURL", "") viper.SetDefault("ViewMode", filebrowser.MosaicViewMode) viper.SetDefault("AlternativeRecaptcha", false) viper.SetDefault("ReCaptchaKey", "") viper.SetDefault("ReCaptchaSecret", "") viper.BindPFlag("Port", flag.Lookup("port")) viper.BindPFlag("Address", flag.Lookup("address")) viper.BindPFlag("Database", flag.Lookup("database")) viper.BindPFlag("Scope", flag.Lookup("scope")) viper.BindPFlag("Logger", flag.Lookup("log")) viper.BindPFlag("Commands", flag.Lookup("commands")) viper.BindPFlag("AllowCommands", flag.Lookup("allow-commands")) viper.BindPFlag("AllowEdit", flag.Lookup("allow-edit")) viper.BindPFlag("AllowNew", flag.Lookup("allow-new")) viper.BindPFlag("AllowPublish", flag.Lookup("allow-publish")) viper.BindPFlag("Locale", flag.Lookup("locale")) viper.BindPFlag("StaticGen", flag.Lookup("staticgen")) viper.BindPFlag("AuthMethod", flag.Lookup("auth.method")) viper.BindPFlag("LoginHeader", flag.Lookup("auth.loginHeader")) viper.BindPFlag("NoAuth", flag.Lookup("no-auth")) viper.BindPFlag("BaseURL", flag.Lookup("baseurl")) viper.BindPFlag("PrefixURL", flag.Lookup("prefixurl")) viper.BindPFlag("ViewMode", flag.Lookup("view-mode")) viper.BindPFlag("AlternativeRecaptcha", flag.Lookup("alternative-recaptcha")) viper.BindPFlag("ReCaptchaKey", flag.Lookup("recaptcha-key")) viper.BindPFlag("ReCaptchaSecret", flag.Lookup("recaptcha-secret")) } func printVersion() { fmt.Println("filebrowser version", filebrowser.Version) os.Exit(0) } func initConfig() { // Add a configuration file if set. if config != "" { cfg := strings.TrimSuffix(config, filepath.Ext(config)) if dir := filepath.Dir(cfg); dir != "" { viper.AddConfigPath(dir) cfg = strings.TrimPrefix(cfg, dir) } viper.SetConfigName(cfg) } else { viper.SetConfigName("filebrowser") viper.AddConfigPath(".") } // Read configuration from a file if exists. err := viper.ReadInConfig() if err != nil { if _, ok := err.(viper.ConfigParseError); ok { panic(err) } } } func main() { setupViper() flag.Parse() if showVer { printVersion() } initConfig(); // Set up process log before anything bad happens. switch viper.GetString("Logger") { case "stdout": log.SetOutput(os.Stdout) case "stderr": log.SetOutput(os.Stderr) case "": log.SetOutput(ioutil.Discard) default: log.SetOutput(&lumberjack.Logger{ Filename: logfile, MaxSize: 100, MaxAge: 14, MaxBackups: 10, }) } // Validate the provided config before moving forward if viper.GetString("AuthMethod") != "none" && viper.GetString("AuthMethod") != "default" && viper.GetString("AuthMethod") != "proxy" { log.Fatal("The property 'auth.method' needs to be set to 'default' or 'proxy'.") } if viper.GetString("AuthMethod") == "proxy" { if viper.GetString("LoginHeader") == "" { log.Fatal("The 'loginHeader' needs to be specified when 'proxy' authentication is used.") } log.Println("[WARN] Filebrowser authentication is configured to 'proxy' authentication. This can cause a huge security issue if the infrastructure is not configured correctly.") } // Builds the address and a listener. laddr := viper.GetString("Address") + ":" + viper.GetString("Port") listener, err := net.Listen("tcp", laddr) if err != nil { log.Fatal(err) } // Tell the user the port in which is listening. fmt.Println("Listening on", listener.Addr().String()) // Starts the server. if err := http.Serve(listener, handler()); err != nil { log.Fatal(err) } } func handler() http.Handler { db, err := storm.Open(viper.GetString("Database")) if err != nil { log.Fatal(err) } recaptchaHost := "https://www.google.com" if viper.GetBool("AlternativeRecaptcha") { recaptchaHost = "https://recaptcha.net" } fm := &filebrowser.FileBrowser{ AuthMethod: viper.GetString("AuthMethod"), LoginHeader: viper.GetString("LoginHeader"), NoAuth: viper.GetBool("NoAuth"), BaseURL: viper.GetString("BaseURL"), PrefixURL: viper.GetString("PrefixURL"), ReCaptchaHost: recaptchaHost, ReCaptchaKey: viper.GetString("ReCaptchaKey"), ReCaptchaSecret: viper.GetString("ReCaptchaSecret"), DefaultUser: &filebrowser.User{ AllowCommands: viper.GetBool("AllowCommands"), AllowEdit: viper.GetBool("AllowEdit"), AllowNew: viper.GetBool("AllowNew"), AllowPublish: viper.GetBool("AllowPublish"), Commands: viper.GetStringSlice("Commands"), Rules: []*filebrowser.Rule{}, Locale: viper.GetString("Locale"), CSS: "", Scope: viper.GetString("Scope"), FileSystem: fileutils.Dir(viper.GetString("Scope")), ViewMode: viper.GetString("ViewMode"), }, Store: &filebrowser.Store{ Config: bolt.ConfigStore{DB: db}, Users: bolt.UsersStore{DB: db}, Share: bolt.ShareStore{DB: db}, }, NewFS: func(scope string) filebrowser.FileSystem { return fileutils.Dir(scope) }, } err = fm.Setup() if err != nil { log.Fatal(err) } switch viper.GetString("StaticGen") { case "hugo": hugo := &staticgen.Hugo{ Root: viper.GetString("Scope"), Public: filepath.Join(viper.GetString("Scope"), "public"), Args: []string{}, CleanPublic: true, } if err = fm.Attach(hugo); err != nil { log.Fatal(err) } case "jekyll": jekyll := &staticgen.Jekyll{ Root: viper.GetString("Scope"), Public: filepath.Join(viper.GetString("Scope"), "_site"), Args: []string{"build"}, CleanPublic: true, } if err = fm.Attach(jekyll); err != nil { log.Fatal(err) } } return h.Handler(fm) }