chore: add support for SERVER_SSL_CA

MyUnisoft · Jun 21, 2024 · 5e66597 · 5e66597
1 parent 56fd7e8
commit 5e66597
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -58,6 +58,7 @@ const envSchema = z.object({
   SERVER_SSL_ENABLED: zBoolean("false"),
   SERVER_SSL_CERT: z.string().optional(),
   SERVER_SSL_KEY: z.string().optional(),
+  SERVER_SSL_CA: z.string().optional(),
   TRUST_PROXY: zBoolean("false"),
   SELF_MONITORING: zBoolean("false")
 });

diff --git a/src/index.ts b/src/index.ts
@@ -46,7 +46,8 @@ const serverOptions = {
   https: env.SERVER_SSL_ENABLED ?
     {
       key: readFileSync(env.SERVER_SSL_KEY!, "utf-8"),
-      cert: readFileSync(env.SERVER_SSL_CERT!, "utf-8")
+      cert: readFileSync(env.SERVER_SSL_CERT!, "utf-8"),
+      ca: typeof env.SERVER_SSL_CA === "string" ? readFileSync(env.SERVER_SSL_CA, "utf-8") : void 0
     } :
     null,
   disableRequestLogging: true,

diff --git a/src/modules/env.ts b/src/modules/env.ts
@@ -11,6 +11,7 @@ const envSchema = z.object({
   SERVER_SSL_ENABLED: zBoolean("false"),
   SERVER_SSL_CERT: z.string().optional(),
   SERVER_SSL_KEY: z.string().optional(),
+  SERVER_SSL_CA: z.string().optional(),
   TRUST_PROXY: zBoolean("false"),
   SELF_MONITORING: zBoolean("false")
 });