1:- module(conf_https_only, []).    2:- use_module(library(option)).    3:- use_module(library(http/thread_httpd)).    4:- use_module(library(http/http_dispatch)).    5:- use_module(cliopatria(cliopatria)).    6
    7/** <module> Configure the HTTPS server
    8
    9To enable HTTPS, create a directory =http= inside the =|config-enabled|=
   10directory of the application and add the following files:
   11
   12    $ =|server-cert.pem|= :
   13      Contains the server certificate.  Passed as certificate_file(File)
   14      to the ssl_context/3 predicate. This file may be omitted, in
   15      which case the =|server-key.pem|= is also passed using the
   16      key_file(+File) option.
   17    $ =|server-key.pem|= :
   18      Contains the private key for the server.  Passed as key_file(File)
   19      option of ssl_context/3.
   20    $ =|passwd|= :
   21      Needs to hold the password if the private key is protected
   22      with a password.  Passed using the password(Password) option
   23      of ssl_context/3.
   24
   25@see	http://www.swi-prolog.org/pldoc/doc_for?object=ssl_context/3 for
   26	a description of these files.
   27*/
   28
   29% uncomment the following to add a server that redirects requests from a
   30% plain HTTP port to the HTTPS port. This configuration assumes there is
   31% no reverse proxy between the public   network and ClioPatria. If there
   32% is, this redirect as well as HTTPS   handling is typically done by the
   33% proxy server.
   34
   35% :- initialization cp_after_load(plain_http_server).
   36
   37plain_http_server :-
   38	plain_http_server([port(5020)]).
   39
   40plain_http_server(Options) :-
   41	option(port(Port), Options),
   42	http_server_property(Port, goal(redirect_to_https)), !.
   43plain_http_server(Options) :-
   44	http_server(redirect_to_https,
   45		    Options).
   46
   47redirect_to_https(Request) :-
   48	option(host(Host), Request),
   49	option(request_uri(ReqURI), Request),
   50	http_server_property(Port, scheme(https)),
   51	format(string(URL), 'https://~w:~w~w', [Host, Port, ReqURI]),
   52	http_redirect(see_other, URL, Request)