all repos — flounder @ 23270a1690d48c2b996eef52a942779dbe4c7dfe

A small site builder for the Gemini protocol

http.go (view raw)

  1package main
  2
  3import (
  4	"bytes"
  5	"fmt"
  6	gmi "git.sr.ht/~adnano/go-gemini"
  7	"github.com/gorilla/handlers"
  8	"github.com/gorilla/sessions"
  9	_ "github.com/mattn/go-sqlite3"
 10	"golang.org/x/crypto/bcrypt"
 11	"html/template"
 12	"io"
 13	"io/ioutil"
 14	"log"
 15	"net/http"
 16	"net/url"
 17	"os"
 18	"path"
 19	"path/filepath"
 20	"strings"
 21	"time"
 22)
 23
 24var t *template.Template
 25var SessionStore *sessions.CookieStore
 26
 27func renderDefaultError(w http.ResponseWriter, statusCode int) {
 28	errorMsg := http.StatusText(statusCode)
 29	renderError(w, errorMsg, statusCode)
 30}
 31
 32func renderError(w http.ResponseWriter, errorMsg string, statusCode int) {
 33	data := struct {
 34		StatusCode int
 35		ErrorMsg   string
 36		Config     Config
 37	}{statusCode, errorMsg, c}
 38	err := t.ExecuteTemplate(w, "error.html", data)
 39	if err != nil { // Shouldn't happen probably
 40		http.Error(w, errorMsg, statusCode)
 41	}
 42}
 43
 44func rootHandler(w http.ResponseWriter, r *http.Request) {
 45	// serve everything inside static directory
 46	if r.URL.Path != "/" {
 47		fileName := path.Join(c.TemplatesDirectory, "static", filepath.Clean(r.URL.Path))
 48		_, err := os.Stat(fileName)
 49		if err != nil {
 50			renderDefaultError(w, http.StatusNotFound)
 51			return
 52		}
 53		http.ServeFile(w, r, fileName) // TODO better error handling
 54		return
 55	}
 56
 57	user := newGetAuthUser(r)
 58	indexFiles, err := getIndexFiles(user.IsAdmin)
 59	if err != nil {
 60		panic(err)
 61	}
 62	allUsers, err := getActiveUserNames()
 63	if err != nil {
 64		panic(err)
 65	}
 66	data := struct {
 67		Config   Config
 68		AuthUser AuthUser
 69		Files    []*File
 70		Users    []string
 71	}{c, user, indexFiles, allUsers}
 72	err = t.ExecuteTemplate(w, "index.html", data)
 73	if err != nil {
 74		panic(err)
 75	}
 76}
 77
 78func feedHandler(w http.ResponseWriter, r *http.Request) {
 79	user := newGetAuthUser(r)
 80	feedEntries, feeds, err := getAllGemfeedEntries()
 81	if err != nil {
 82		panic(err)
 83	}
 84	data := struct {
 85		Config      Config
 86		FeedEntries []FeedEntry
 87		Feeds       []Gemfeed
 88		AuthUser    AuthUser
 89	}{c, feedEntries, feeds, user}
 90	err = t.ExecuteTemplate(w, "feed.html", data)
 91	if err != nil {
 92		panic(err)
 93	}
 94}
 95
 96func editFileHandler(w http.ResponseWriter, r *http.Request) {
 97	user := newGetAuthUser(r)
 98	if !user.LoggedIn {
 99		renderDefaultError(w, http.StatusForbidden)
100		return
101	}
102	fileName := filepath.Clean(r.URL.Path[len("/edit/"):])
103	filePath := path.Join(c.FilesDirectory, user.Username, fileName)
104	isText := isTextFile(filePath)
105	alert := ""
106	var warnings []string
107	if r.Method == "POST" {
108		// get post body
109		r.ParseForm()
110		fileText := r.Form.Get("file_text")
111		// Web form by default gives us CR LF newlines.
112		// Unix files use just LF
113		fileText = strings.ReplaceAll(fileText, "\r\n", "\n")
114		fileBytes := []byte(fileText)
115		err := checkIfValidFile(filePath, fileBytes)
116		if err != nil {
117			log.Println(err)
118			renderError(w, err.Error(), http.StatusBadRequest)
119			return
120		}
121		sfl := getSchemedFlounderLinkLines(strings.NewReader(fileText))
122		if len(sfl) > 0 {
123			warnings = append(warnings, "Warning! Some of your links to flounder pages use schemas. This means that they may break when viewed in Gemini or over HTTPS. Plase remove gemini: or https: from the start of these links:\n")
124			for _, l := range sfl {
125				warnings = append(warnings, l)
126			}
127		}
128		// create directories if dne
129		os.MkdirAll(path.Dir(filePath), os.ModePerm)
130		if userHasSpace(user.Username, len(fileBytes)) {
131			if isText { // Cant edit binary files here
132				err = ioutil.WriteFile(filePath, fileBytes, 0644)
133			}
134		} else {
135			renderError(w, fmt.Sprintf("Bad Request: Out of file space. Max space: %d.", c.MaxUserBytes), http.StatusBadRequest)
136			return
137		}
138		if err != nil {
139			panic(err)
140		}
141		alert = "saved"
142		newName := filepath.Clean(r.Form.Get("rename"))
143		err = checkIfValidFile(newName, fileBytes)
144		if err != nil {
145			log.Println(err)
146			renderError(w, err.Error(), http.StatusBadRequest)
147			return
148		}
149		if newName != fileName {
150			newPath := path.Join(c.FilesDirectory, user.Username, newName)
151			os.MkdirAll(path.Dir(newPath), os.ModePerm)
152			os.Rename(filePath, newPath)
153			fileName = newName
154			filePath = newPath
155			alert += " and renamed"
156		}
157	}
158
159	err := checkIfValidFile(filePath, nil)
160	if err != nil {
161		log.Println(err)
162		renderError(w, err.Error(), http.StatusBadRequest)
163		return
164	}
165	// Create directories if dne
166	f, err := os.OpenFile(filePath, os.O_RDONLY, 0644)
167	var fileBytes []byte
168	if os.IsNotExist(err) || !isText {
169		fileBytes = []byte{}
170		err = nil
171	} else {
172		defer f.Close()
173		fileBytes, err = ioutil.ReadAll(f)
174	}
175	if err != nil {
176		panic(err)
177	}
178	data := struct {
179		FileName string
180		FileText string
181		Config   Config
182		AuthUser AuthUser
183		Host     string
184		IsText   bool
185		IsGemini bool
186		IsGemlog bool
187		Alert    string
188		Warnings []string
189	}{fileName, string(fileBytes), c, user, c.Host, isText, isGemini(fileName), strings.HasPrefix(fileName, "gemlog"), alert, warnings}
190	err = t.ExecuteTemplate(w, "edit_file.html", data)
191	if err != nil {
192		panic(err)
193	}
194}
195
196func uploadFilesHandler(w http.ResponseWriter, r *http.Request) {
197	if r.Method == "POST" {
198		user := newGetAuthUser(r)
199		if !user.LoggedIn {
200			renderDefaultError(w, http.StatusForbidden)
201			return
202		}
203		r.ParseMultipartForm(10 << 6) // why does this not work
204		file, fileHeader, err := r.FormFile("file")
205		fileName := filepath.Clean(fileHeader.Filename)
206		defer file.Close()
207		if err != nil {
208			log.Println(err)
209			renderError(w, err.Error(), http.StatusBadRequest)
210			return
211		}
212		dest, _ := ioutil.ReadAll(file)
213		err = checkIfValidFile(fileName, dest)
214		if err != nil {
215			log.Println(err)
216			renderError(w, err.Error(), http.StatusBadRequest)
217			return
218		}
219		destPath := path.Join(c.FilesDirectory, user.Username, fileName)
220
221		f, err := os.OpenFile(destPath, os.O_WRONLY|os.O_CREATE, 0644)
222		if err != nil {
223			panic(err)
224		}
225		defer f.Close()
226		if userHasSpace(user.Username, c.MaxFileBytes) { // Not quite right
227			io.Copy(f, bytes.NewReader(dest))
228		} else {
229			renderError(w, fmt.Sprintf("Bad Request: Out of file space. Max space: %d.", c.MaxUserBytes), http.StatusBadRequest)
230			return
231		}
232	}
233	http.Redirect(w, r, "/my_site", http.StatusSeeOther)
234}
235
236type AuthUser struct {
237	LoggedIn          bool
238	Username          string
239	IsAdmin           bool
240	ImpersonatingUser string // used if impersonating
241}
242
243func newGetAuthUser(r *http.Request) AuthUser {
244	session, _ := SessionStore.Get(r, "cookie-session")
245	user, ok := session.Values["auth_user"].(string)
246	impers, _ := session.Values["impersonating_user"].(string)
247	isAdmin, _ := session.Values["admin"].(bool)
248	return AuthUser{
249		LoggedIn:          ok,
250		Username:          user,
251		IsAdmin:           isAdmin,
252		ImpersonatingUser: impers,
253	}
254}
255
256func mySiteHandler(w http.ResponseWriter, r *http.Request) {
257	user := newGetAuthUser(r)
258	if !user.LoggedIn {
259		renderDefaultError(w, http.StatusForbidden)
260		return
261	}
262	// check auth
263	userFolder := getUserDirectory(user.Username)
264	files, _ := getMyFilesRecursive(userFolder, user.Username)
265	currentDate := time.Now().Format("2006-01-02")
266	data := struct {
267		Config      Config
268		Files       []File
269		AuthUser    AuthUser
270		CurrentDate string
271	}{c, files, user, currentDate}
272	_ = t.ExecuteTemplate(w, "my_site.html", data)
273}
274
275func myAccountHandler(w http.ResponseWriter, r *http.Request) {
276	user := newGetAuthUser(r)
277	authUser := user.Username
278	if !user.LoggedIn {
279		renderDefaultError(w, http.StatusForbidden)
280		return
281	}
282	me, _ := getUserByName(user.Username)
283	type pageData struct {
284		Config   Config
285		AuthUser AuthUser
286		MyUser   *User
287		Errors   []string
288	}
289	data := pageData{c, user, me, nil}
290
291	if r.Method == "GET" {
292		err := t.ExecuteTemplate(w, "me.html", data)
293		if err != nil {
294			panic(err)
295		}
296	} else if r.Method == "POST" {
297		r.ParseForm()
298		newUsername := r.Form.Get("username")
299		errors := []string{}
300		newEmail := r.Form.Get("email")
301		newDomain := r.Form.Get("domain")
302		newUsername = strings.ToLower(newUsername)
303		var err error
304		_, exists := domains[newDomain]
305		if newDomain != me.Domain && !exists {
306			_, err = DB.Exec("update user set domain = ? where username = ?", newDomain, me.Username) // TODO use transaction
307			if err != nil {
308				errors = append(errors, err.Error())
309			} else {
310				refreshDomainMap()
311				log.Printf("Changed domain for %s from %s to %s", authUser, me.Domain, newDomain)
312			}
313		}
314		if newEmail != me.Email {
315			_, err = DB.Exec("update user set email = ? where username = ?", newEmail, me.Username)
316			if err != nil {
317				// TODO better error not sql
318				errors = append(errors, err.Error())
319			} else {
320				log.Printf("Changed email for %s from %s to %s", authUser, me.Email, newEmail)
321			}
322		}
323		if newUsername != authUser {
324			// Rename User
325			err = renameUser(authUser, newUsername)
326			if err != nil {
327				log.Println(err)
328				errors = append(errors, "Could not rename user")
329			} else {
330				session, _ := SessionStore.Get(r, "cookie-session")
331				session.Values["auth_user"] = newUsername
332				session.Save(r, w)
333			}
334		}
335		// reset auth
336		user = newGetAuthUser(r)
337		data.Errors = errors
338		data.AuthUser = user
339		data.MyUser.Email = newEmail
340		data.MyUser.Domain = newDomain
341		_ = t.ExecuteTemplate(w, "me.html", data)
342	}
343}
344
345func archiveHandler(w http.ResponseWriter, r *http.Request) {
346	authUser := newGetAuthUser(r)
347	if !authUser.LoggedIn {
348		renderDefaultError(w, http.StatusForbidden)
349		return
350	}
351	if r.Method == "GET" {
352		userFolder := getUserDirectory(authUser.Username)
353		err := zipit(userFolder, w)
354		if err != nil {
355			panic(err)
356		}
357
358	}
359}
360func loginHandler(w http.ResponseWriter, r *http.Request) {
361	if r.Method == "GET" {
362		// show page
363		data := struct {
364			Error  string
365			Config Config
366		}{"", c}
367		err := t.ExecuteTemplate(w, "login.html", data)
368		if err != nil {
369			panic(err)
370		}
371	} else if r.Method == "POST" {
372		r.ParseForm()
373		name := strings.ToLower(r.Form.Get("username"))
374		password := r.Form.Get("password")
375		row := DB.QueryRow("SELECT username, password_hash, active, admin FROM user where username = $1 OR email = $1", name)
376		var db_password []byte
377		var username string
378		var active bool
379		var isAdmin bool
380		err := row.Scan(&username, &db_password, &active, &isAdmin)
381		if err != nil {
382			if strings.Contains(err.Error(), "no rows") {
383				data := struct {
384					Error  string
385					Config Config
386				}{"Username or email '" + name + "' does not exist", c}
387				t.ExecuteTemplate(w, "login.html", data)
388				return
389			} else {
390				panic(err)
391			}
392		}
393		if db_password != nil && !active {
394			data := struct {
395				Error  string
396				Config Config
397			}{"Your account is not active yet. Pending admin approval", c}
398			t.ExecuteTemplate(w, "login.html", data)
399			return
400		}
401		if bcrypt.CompareHashAndPassword(db_password, []byte(password)) == nil {
402			log.Println("logged in")
403			session, _ := SessionStore.Get(r, "cookie-session")
404			session.Values["auth_user"] = username
405			session.Values["admin"] = isAdmin
406			session.Save(r, w)
407			http.Redirect(w, r, "/my_site", http.StatusSeeOther)
408		} else {
409			data := struct {
410				Error  string
411				Config Config
412			}{"Invalid login or password", c}
413			err := t.ExecuteTemplate(w, "login.html", data)
414			if err != nil {
415				panic(err)
416			}
417		}
418	}
419}
420
421func logoutHandler(w http.ResponseWriter, r *http.Request) {
422	session, _ := SessionStore.Get(r, "cookie-session")
423	impers, ok := session.Values["impersonating_user"].(string)
424	if ok {
425		session.Values["auth_user"] = impers
426		session.Values["impersonating_user"] = nil // TODO expire this automatically
427		// session.Values["admin"] = nil // TODO fix admin
428	} else {
429		session.Options.MaxAge = -1
430	}
431	session.Save(r, w)
432	http.Redirect(w, r, "/", http.StatusSeeOther)
433}
434
435const ok = "-0123456789abcdefghijklmnopqrstuvwxyz"
436
437var bannedUsernames = []string{"www", "proxy", "grafana"}
438
439func registerHandler(w http.ResponseWriter, r *http.Request) {
440	if r.Method == "GET" {
441		data := struct {
442			Errors []string
443			Config Config
444		}{nil, c}
445		err := t.ExecuteTemplate(w, "register.html", data)
446		if err != nil {
447			panic(err)
448		}
449	} else if r.Method == "POST" {
450		r.ParseForm()
451		email := strings.ToLower(r.Form.Get("email"))
452		password := r.Form.Get("password")
453		errors := []string{}
454		if r.Form.Get("password") != r.Form.Get("password2") {
455			errors = append(errors, "Passwords don't match")
456		}
457		if len(password) < 6 {
458			errors = append(errors, "Password is too short")
459		}
460		username := strings.ToLower(r.Form.Get("username"))
461		err := isOkUsername(username)
462		if err != nil {
463			errors = append(errors, err.Error())
464		}
465		hashedPassword, err := bcrypt.GenerateFromPassword([]byte(password), 8) // TODO handle error
466		if err != nil {
467			panic(err)
468		}
469		reference := r.Form.Get("reference")
470		if len(errors) == 0 {
471			_, err = DB.Exec("insert into user (username, email, password_hash, reference) values ($1, $2, $3, $4)", username, email, string(hashedPassword), reference)
472			if err != nil {
473				errors = append(errors, "Username or email is already used")
474			}
475		}
476		if len(errors) > 0 {
477			data := struct {
478				Config Config
479				Errors []string
480			}{c, errors}
481			t.ExecuteTemplate(w, "register.html", data)
482		} else {
483			data := struct {
484				Config  Config
485				Message string
486				Title   string
487			}{c, "Registration complete! The server admin will approve your request before you can log in.", "Registration Complete"}
488			t.ExecuteTemplate(w, "message.html", data)
489		}
490	}
491}
492
493func deleteFileHandler(w http.ResponseWriter, r *http.Request) {
494	user := newGetAuthUser(r)
495	if !user.LoggedIn {
496		renderDefaultError(w, http.StatusForbidden)
497		return
498	}
499	filePath := safeGetFilePath(user.Username, r.URL.Path[len("/delete/"):])
500	if r.Method == "POST" {
501		os.Remove(filePath) // TODO handle error
502	}
503	http.Redirect(w, r, "/my_site", http.StatusSeeOther)
504}
505
506func adminHandler(w http.ResponseWriter, r *http.Request) {
507	user := newGetAuthUser(r)
508	if !user.IsAdmin {
509		renderDefaultError(w, http.StatusForbidden)
510		return
511	}
512	allUsers, err := getUsers()
513	if err != nil {
514		log.Println(err)
515		renderDefaultError(w, http.StatusInternalServerError)
516		return
517	}
518	data := struct {
519		Users    []User
520		AuthUser AuthUser
521		Config   Config
522	}{allUsers, user, c}
523	err = t.ExecuteTemplate(w, "admin.html", data)
524	if err != nil {
525		panic(err)
526	}
527}
528
529func getFavicon(user string) string {
530	faviconPath := path.Join(c.FilesDirectory, filepath.Clean(user), "favicon.txt")
531	content, err := ioutil.ReadFile(faviconPath)
532	if err != nil {
533		return ""
534	}
535	strcontent := []rune(string(content))
536	if len(strcontent) > 0 {
537		return string(strcontent[0])
538	}
539	return ""
540}
541
542// Server a user's file
543// TODO replace with gemini proxy
544// Here be dragons
545func userFile(w http.ResponseWriter, r *http.Request) {
546	var userName string
547	custom := domains[r.Host]
548	if custom != "" {
549		userName = custom
550	} else {
551		userName = filepath.Clean(strings.Split(r.Host, ".")[0]) // Clean probably unnecessary
552	}
553	p := filepath.Clean(r.URL.Path)
554	var isDir bool
555	fullPath := path.Join(c.FilesDirectory, userName, p) // TODO rename filepath
556	stat, err := os.Stat(fullPath)
557	if stat != nil {
558		isDir = stat.IsDir()
559	}
560	if strings.HasSuffix(p, "index.gmi") {
561		http.Redirect(w, r, path.Dir(p), http.StatusMovedPermanently)
562	}
563
564	if strings.HasPrefix(p, "/"+HiddenFolder) {
565		renderDefaultError(w, http.StatusForbidden)
566		return
567	}
568	if r.URL.Path == "/gemlog/atom.xml" && os.IsNotExist(err) {
569		w.Header().Set("Content-Type", "application/atom+xml")
570		// TODO set always somehow
571		feed := generateFeedFromUser(userName)
572		atomString := feed.toAtomFeed()
573		io.Copy(w, strings.NewReader(atomString))
574		return
575	}
576
577	var geminiContent string
578	_, err = os.Stat(path.Join(fullPath, "index.gmi"))
579	if isDir {
580		// redirect slash
581		if !strings.HasSuffix(r.URL.Path, "/") {
582			http.Redirect(w, r, p+"/", http.StatusSeeOther)
583		}
584		if os.IsNotExist(err) {
585			if p == "/gemlog" {
586				geminiContent = generateGemfeedPage(userName)
587			} else {
588				geminiContent = generateFolderPage(fullPath)
589			}
590		} else {
591			fullPath = path.Join(fullPath, "index.gmi")
592		}
593	}
594	if geminiContent == "" && os.IsNotExist(err) {
595		renderDefaultError(w, http.StatusNotFound)
596		return
597	}
598	// Dumb content negotiation
599	_, raw := r.URL.Query()["raw"]
600	acceptsGemini := strings.Contains(r.Header.Get("Accept"), "text/gemini")
601	if !raw && !acceptsGemini && (isGemini(fullPath) || geminiContent != "") {
602		var htmlString string
603		if geminiContent == "" {
604			file, _ := os.Open(fullPath)
605			htmlString = textToHTML(nil, gmi.ParseText(file))
606			defer file.Close()
607		} else {
608			htmlString = textToHTML(nil, gmi.ParseText(strings.NewReader(geminiContent)))
609		}
610		favicon := getFavicon(userName)
611		hostname := strings.Split(r.Host, ":")[0]
612		uri := url.URL{
613			Scheme: "gemini",
614			Host:   hostname,
615			Path:   p,
616		}
617		data := struct {
618			SiteBody  template.HTML
619			Favicon   string
620			PageTitle string
621			URI       *url.URL
622			Config    Config
623		}{template.HTML(htmlString), favicon, userName + p, &uri, c}
624		err = t.ExecuteTemplate(w, "user_page.html", data)
625		if err != nil {
626			panic(err)
627		}
628	} else {
629		http.ServeFile(w, r, fullPath)
630	}
631}
632
633func deleteAccountHandler(w http.ResponseWriter, r *http.Request) {
634	user := newGetAuthUser(r)
635	if r.Method == "POST" {
636		r.ParseForm()
637		validate := r.Form.Get("validate-delete")
638		if validate == user.Username {
639			err := deleteUser(user.Username)
640			if err != nil {
641				log.Println(err)
642				renderDefaultError(w, http.StatusInternalServerError)
643				return
644			}
645			logoutHandler(w, r)
646		} else {
647			http.Redirect(w, r, "/me", http.StatusSeeOther)
648		}
649	}
650}
651
652func resetPasswordHandler(w http.ResponseWriter, r *http.Request) {
653	user := newGetAuthUser(r)
654	data := struct {
655		Config   Config
656		AuthUser AuthUser
657		Error    string
658	}{c, user, ""}
659	if r.Method == "GET" {
660		err := t.ExecuteTemplate(w, "reset_pass.html", data)
661		if err != nil {
662			panic(err)
663		}
664	} else if r.Method == "POST" {
665		r.ParseForm()
666		enteredCurrPass := r.Form.Get("password")
667		password1 := r.Form.Get("new_password1")
668		password2 := r.Form.Get("new_password2")
669		if password1 != password2 {
670			data.Error = "New passwords do not match"
671		} else if len(password1) < 6 {
672			data.Error = "Password is too short"
673		} else {
674			err := checkAuth(user.Username, enteredCurrPass)
675			if err == nil {
676				hashedPassword, err := bcrypt.GenerateFromPassword([]byte(password1), 8)
677				if err != nil {
678					panic(err)
679				}
680				_, err = DB.Exec("update user set password_hash = ? where username = ?", hashedPassword, user.Username)
681				if err != nil {
682					panic(err)
683				}
684				log.Printf("User %s reset password", user.Username)
685				http.Redirect(w, r, "/me", http.StatusSeeOther)
686				return
687			} else {
688				data.Error = "That's not your current password"
689			}
690		}
691		err := t.ExecuteTemplate(w, "reset_pass.html", data)
692		if err != nil {
693			panic(err)
694		}
695	}
696}
697
698func adminUserHandler(w http.ResponseWriter, r *http.Request) {
699	user := newGetAuthUser(r)
700	if r.Method == "POST" {
701		if !user.IsAdmin {
702			renderDefaultError(w, http.StatusForbidden)
703			return
704		}
705		components := strings.Split(r.URL.Path, "/")
706		if len(components) < 5 {
707			renderError(w, "Invalid action", http.StatusBadRequest)
708			return
709		}
710		userName := components[3]
711		action := components[4]
712		var err error
713		if action == "activate" {
714			err = activateUser(userName)
715		} else if action == "impersonate" {
716			if user.ImpersonatingUser != "" {
717				// Don't allow nested impersonation
718				renderError(w, "Cannot nest impersonation, log out from impersonated user first.", 400)
719				return
720			}
721			session, _ := SessionStore.Get(r, "cookie-session")
722			session.Values["auth_user"] = userName
723			session.Values["impersonating_user"] = user.Username
724			session.Save(r, w)
725			log.Printf("User %s impersonated %s", user.Username, userName)
726			http.Redirect(w, r, "/", http.StatusSeeOther)
727			return
728		}
729		if err != nil {
730			log.Println(err)
731			renderDefaultError(w, http.StatusInternalServerError)
732			return
733		}
734		http.Redirect(w, r, "/admin", http.StatusSeeOther)
735	}
736}
737
738func checkDomainHandler(w http.ResponseWriter, r *http.Request) {
739	domain := r.URL.Query().Get("domain")
740	if domain != "" && domains[domain] != "" {
741		w.Write([]byte(domain))
742		return
743	}
744	http.Error(w, "Not Found", 404)
745}
746func runHTTPServer() {
747	log.Printf("Running http server with hostname %s on port %d.", c.Host, c.HttpPort)
748	var err error
749	t = template.New("main").Funcs(template.FuncMap{"parent": path.Dir, "hasSuffix": strings.HasSuffix})
750	t, err = t.ParseGlob(path.Join(c.TemplatesDirectory, "*.html"))
751	if err != nil {
752		log.Fatal(err)
753	}
754	serveMux := http.NewServeMux()
755
756	s := strings.SplitN(c.Host, ":", 2)
757	hostname := s[0]
758	port := c.HttpPort
759
760	serveMux.HandleFunc(hostname+"/", rootHandler)
761	serveMux.HandleFunc(hostname+"/feed", feedHandler)
762	serveMux.HandleFunc(hostname+"/my_site", mySiteHandler)
763	serveMux.HandleFunc(hostname+"/me", myAccountHandler)
764	serveMux.HandleFunc(hostname+"/my_site/flounder-archive.zip", archiveHandler)
765	serveMux.HandleFunc(hostname+"/admin", adminHandler)
766	serveMux.HandleFunc(hostname+"/edit/", editFileHandler)
767	serveMux.HandleFunc(hostname+"/upload", uploadFilesHandler)
768	serveMux.Handle(hostname+"/login", limit(http.HandlerFunc(loginHandler)))
769	serveMux.Handle(hostname+"/register", limit(http.HandlerFunc(registerHandler)))
770	serveMux.HandleFunc(hostname+"/logout", logoutHandler)
771	serveMux.HandleFunc(hostname+"/delete/", deleteFileHandler)
772	serveMux.HandleFunc(hostname+"/delete-account", deleteAccountHandler)
773	serveMux.HandleFunc(hostname+"/reset-password", resetPasswordHandler)
774
775	// Check domain -- used by caddy
776	serveMux.HandleFunc(hostname+"/check-domain", checkDomainHandler)
777
778	// admin commands
779	serveMux.HandleFunc(hostname+"/admin/user/", adminUserHandler)
780
781	serveMux.HandleFunc(hostname+"/webdav/", webdavHandler)
782
783	wrapped := handlers.CustomLoggingHandler(log.Writer(), handlers.RecoveryHandler()(serveMux), logFormatter)
784
785	// handle user files based on subdomain
786	// also routes to proxy
787	serveMux.HandleFunc("proxy."+hostname+"/", proxyGemini) // eg. proxy.flounder.online
788	serveMux.HandleFunc("/", userFile)
789	// login+register functions
790	srv := &http.Server{
791		ReadTimeout:  5 * time.Second,
792		WriteTimeout: 10 * time.Second,
793		IdleTimeout:  120 * time.Second,
794		Addr:         fmt.Sprintf(":%d", port),
795		// TLSConfig:    tlsConfig,
796		Handler: wrapped,
797	}
798	log.Fatal(srv.ListenAndServe())
799}