api: https

Author: teddav

mpc-server/.gitignore

@@ -8,4 +8,5 @@
 
 .env
 
-/tmp/
+/tmp/
+/ssl-cert/

mpc-server/Cargo.toml

@@ -34,3 +34,4 @@ axum-extra = { version = "0.10.1", features = ["typed-header"] }
 dotenv = "0.15.0"
 toml = "0.8.22"
 hex = "0.4.3"
+axum-server = { version = "0.7.2", features = ["tls-rustls"] }

mpc-server/src/main.rs

@@ -4,12 +4,13 @@ use axum::{
     http::StatusCode,
     routing::{get, post},
 };
+use axum_server::tls_rustls::RustlsConfig;
 use co_noir::{Address, Bn254, CrsParser, NetworkParty, PartyID, Utils};
 use co_ultrahonk::prelude::ZeroKnowledge;
 use rustls::pki_types::CertificateDer;
 use serde::Deserialize;
 use serde_json::json;
-use std::sync::Arc;
+use std::{net::SocketAddr, path::PathBuf, sync::Arc};
 use token::Token;
 use tower_http::{
     cors::{Any, CorsLayer},
@@ -54,6 +55,10 @@ async fn main() -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
         .install_default()
         .unwrap();
 
+    let ssl_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("ssl-cert");
+    let config =
+        RustlsConfig::from_pem_file(ssl_dir.join("cert.pem"), ssl_dir.join("key.pem")).await?;
+
     setup_db()?;
 
     let parties = vec![
@@ -177,8 +182,12 @@ async fn main() -> Result<(), Box<dyn std::error::Error + Send + Sync>> {
                 .on_response(trace::DefaultOnResponse::new().level(Level::INFO)),
         );
 
-    let listener = tokio::net::TcpListener::bind("0.0.0.0:8000").await?;
-    axum::serve(listener, app).await?;
+    // let listener = tokio::net::TcpListener::bind("0.0.0.0:8000").await?;
+    // axum::serve(listener, app).await?;
+    let addr = SocketAddr::from(([0, 0, 0, 0], 8000));
+    axum_server::bind_rustls(addr, config)
+        .serve(app.into_make_service())
+        .await?;
 
     Ok(())
 }

web-app/next.config.ts

@@ -5,7 +5,7 @@ const isProduction = process.env.NODE_ENV === "production";
 const nextConfig: NextConfig = {
   reactStrictMode: true,
   env: {
-    NEXT_PUBLIC_API_URL: isProduction ? "http://94.130.176.20:8000" : "http://localhost:8000",
+    NEXT_PUBLIC_API_URL: isProduction ? "https://94.130.176.20:8000" : "http://localhost:8000",
   },
 };