feat(api-server): Add HTTPS support and custom certificate configuration (#3874)

src/plugins/api-server/backend/main.ts

@@ -1,3 +1,7 @@
+import { createServer as createHttpServer } from 'node:http';
+import { createServer as createHttpsServer } from 'node:https';
+import { readFileSync } from 'node:fs';
+
 import { jwt } from 'hono/jwt';
 import { OpenAPIHono as Hono } from '@hono/zod-openapi';
 import { cors } from 'hono/cors';
@@ -48,22 +52,26 @@ export const backend = createBackend<BackendType, APIServerConfig>({
       (newVolumeState: VolumeState) => (this.volumeState = newVolumeState),
     );
 
-    this.run(config.hostname, config.port);
+    this.run(config);
   },
   stop() {
     this.end();
   },
   onConfigChange(config) {
+    const old = this.oldConfig;
     if (
-      this.oldConfig?.hostname === config.hostname &&
-      this.oldConfig?.port === config.port
+      old?.hostname === config.hostname &&
+      old?.port === config.port &&
+      old?.useHttps === config.useHttps &&
+      old?.certPath === config.certPath &&
+      old?.keyPath === config.keyPath
     ) {
       this.oldConfig = config;
       return;
     }
 
     this.end();
-    this.run(config.hostname, config.port);
+    this.run(config);
     this.oldConfig = config;
   },
 
@@ -153,15 +161,30 @@ export const backend = createBackend<BackendType, APIServerConfig>({
 
     this.injectWebSocket = ws.injectWebSocket.bind(this);
   },
-  run(hostname, port) {
+  run(config) {
     if (!this.app) return;
 
     try {
-      this.server = serve({
-        fetch: this.app.fetch.bind(this.app),
-        port,
-        hostname,
-      });
+      const serveOptions =
+        config.useHttps && config.certPath && config.keyPath
+          ? {
+              fetch: this.app.fetch.bind(this.app),
+              port: config.port,
+              hostname: config.hostname,
+              createServer: createHttpsServer,
+              serverOptions: {
+                key: readFileSync(config.keyPath),
+                cert: readFileSync(config.certPath),
+              },
+            }
+          : {
+              fetch: this.app.fetch.bind(this.app),
+              port: config.port,
+              hostname: config.hostname,
+              createServer: createHttpServer,
+            };
+
+      this.server = serve(serveOptions);
 
       if (this.injectWebSocket && this.server) {
         this.injectWebSocket(this.server);

src/plugins/api-server/backend/types.ts

@@ -17,6 +17,6 @@ export type BackendType = {
   injectWebSocket?: (server: ReturnType<typeof serve>) => void;
 
   init: (ctx: BackendContext<APIServerConfig>) => void;
-  run: (hostname: string, port: number) => void;
+  run: (config: APIServerConfig) => void;
   end: () => void;
 };