feat: add TLS configuration support for Redis connections (#31)

- Add TLS configuration option to the options struct
- Introduce `WithTLS` option function to configure Redis connection with TLS
- Introduce `WithSkipTLSVerify` option function to allow skipping TLS certificate verification
- Update `NewWorker` function to include TLS configuration in Redis connection settings

Signed-off-by: appleboy <[email protected]>

Author: appleboy

options.go

@@ -2,6 +2,7 @@ package redisdb
 
 import (
 	"context"
+	"crypto/tls"
 
 	"github.com/golang-queue/queue"
 	"github.com/golang-queue/queue/core"
@@ -23,6 +24,7 @@ type options struct {
 	cluster          bool
 	sentinel         bool
 	masterName       string
+	tls              *tls.Config
 }
 
 // WithAddr setup the addr of redis
@@ -53,6 +55,38 @@ func WithSentinel(enable bool) Option {
 	}
 }
 
+// WithTLS is an option function that configures the Redis connection to use TLS.
+// It sets the ServerName to the address of the Redis server and enforces a minimum
+// TLS version of 1.2.
+func WithTLS() Option {
+	return func(w *options) {
+		w.tls = &tls.Config{
+			MinVersion: tls.VersionTLS12,
+		}
+		if w.addr != "" {
+			w.tls.ServerName = w.addr
+		}
+	}
+}
+
+// WithSkipTLSVerify returns an Option that configures the TLS settings to skip
+// verification of the server's certificate. This is useful for connecting to
+// servers with self-signed certificates or when certificate verification is
+// not required. Use this option with caution as it makes the connection
+// susceptible to man-in-the-middle attacks.
+func WithSkipTLSVerify() Option {
+	return func(w *options) {
+		if w.tls == nil {
+			w.tls = &tls.Config{
+				InsecureSkipVerify: true, //nolint: gosec
+
+			}
+			return
+		}
+		w.tls.InsecureSkipVerify = true
+	}
+}
+
 // WithMasterName sentinel master name
 func WithMasterName(masterName string) Option {
 	return func(w *options) {

redis.go

@@ -41,10 +41,11 @@ func NewWorker(opts ...Option) *Worker {
 	}
 
 	options := &redis.Options{
-		Addr:     w.opts.addr,
-		Username: w.opts.username,
-		Password: w.opts.password,
-		DB:       w.opts.db,
+		Addr:      w.opts.addr,
+		Username:  w.opts.username,
+		Password:  w.opts.password,
+		DB:        w.opts.db,
+		TLSConfig: w.opts.tls,
 	}
 	w.rdb = redis.NewClient(options)
 
@@ -58,9 +59,10 @@ func NewWorker(opts ...Option) *Worker {
 
 	if w.opts.cluster {
 		w.rdb = redis.NewClusterClient(&redis.ClusterOptions{
-			Addrs:    strings.Split(w.opts.addr, ","),
-			Username: w.opts.username,
-			Password: w.opts.password,
+			Addrs:     strings.Split(w.opts.addr, ","),
+			Username:  w.opts.username,
+			Password:  w.opts.password,
+			TLSConfig: w.opts.tls,
 		})
 	}
 
@@ -71,6 +73,7 @@ func NewWorker(opts ...Option) *Worker {
 			Username:      w.opts.username,
 			Password:      w.opts.password,
 			DB:            w.opts.db,
+			TLSConfig:     w.opts.tls,
 		})
 	}