silk/web/server.cjs

const http = require('http');
const fs = require('fs');
const path = require('path');
const zlib = require('zlib');

const DIST = '/home/pan/silk/web/dist';
const PORT = 5174;

const MIME = {
  '.html': 'text/html; charset=utf-8',
  '.js': 'application/javascript; charset=utf-8',
  '.css': 'text/css; charset=utf-8',
  '.json': 'application/json; charset=utf-8',
  '.png': 'image/png',
  '.svg': 'image/svg+xml',
  '.ico': 'image/x-icon',
  '.woff': 'font/woff',
  '.woff2': 'font/woff2',
};

// 统一安全响应头（静态资源）
const SECURITY_HEADERS = {
  'X-Content-Type-Options': 'nosniff',
  'X-Frame-Options': 'DENY',
  'Referrer-Policy': 'no-referrer',
  'Content-Security-Policy':
    "default-src 'self'; img-src 'self' data: blob: http://100.83.103.1:7480; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss:; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'",
  'Strict-Transport-Security': 'max-age=31536000; includeSubDomains',
};

const server = http.createServer((req, res) => {
  console.log(`${req.method} ${req.url}`);

  // API proxy to Go backend
  if (req.url.startsWith('/api')) {
    const options = {
      hostname: '127.0.0.1',
      port: 3000,
      path: req.url,
      method: req.method,
      headers: { ...req.headers, host: 'localhost:3000' },
    };
    const proxy = http.request(options, (proxyRes) => {
      res.writeHead(proxyRes.statusCode, proxyRes.headers);
      proxyRes.pipe(res);
    });
    proxy.on('error', (e) => {
      console.error('API proxy error:', e.message);
      res.writeHead(502, { 'Content-Type': 'application/json' });
      res.end(JSON.stringify({ error: 'Bad Gateway', detail: e.message }));
    });
    req.pipe(proxy);
    return;
  }

  // FLV/fMP4/HLS stream proxy to ZLMediaKit (avoids CORS/network issues)
  const streamPath = req.url.split('?')[0];
  if (streamPath.match(/^\/rtp\//) || streamPath.match(/\.(flv|mp4|m3u8|ts)$/)) {
    const proxy = http.request({
      hostname: '127.0.0.1',
      port: 8081,
      path: req.url,
      method: req.method,
      headers: { ...req.headers, host: 'localhost:8081' },
    }, (proxyRes) => {
      res.writeHead(proxyRes.statusCode, proxyRes.headers);
      proxyRes.pipe(res);
    });
    proxy.on('error', (e) => {
      console.error('Stream proxy error:', e.message);
      res.writeHead(502, { 'Content-Type': 'text/plain' });
      res.end('Stream proxy error: ' + e.message);
    });
    req.pipe(proxy);
    return;
  }

  // Static file serving with gzip
  let urlPath = req.url.split('?')[0];
  let filePath = path.join(DIST, urlPath === '/' ? 'index.html' : urlPath);

  if (!fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
    filePath = path.join(DIST, 'index.html');
  }

  fs.readFile(filePath, (err, data) => {
    if (err) {
      res.writeHead(404);
      res.end('Not Found');
      return;
    }

    const ext = path.extname(filePath);
    const contentType = MIME[ext] || 'application/octet-stream';
    const acceptEncoding = req.headers['accept-encoding'] || '';
    const useGzip = acceptEncoding.includes('gzip') && data.length > 1024;
    // index.html 不缓存，带 hash 的静态资源缓存 7 天
    const cacheControl = ext === '.html'
      ? 'no-cache, no-store, must-revalidate'
      : 'public, max-age=604800';

    if (useGzip) {
      zlib.gzip(data, (err, compressed) => {
        if (err) {
          res.writeHead(500);
          res.end('Compression Error');
          return;
        }
        res.writeHead(200, {
          'Content-Type': contentType,
          'Content-Encoding': 'gzip',
          'Content-Length': compressed.length,
          'Cache-Control': cacheControl,
          ...SECURITY_HEADERS,
        });
        res.end(compressed);
      });
    } else {
      res.writeHead(200, {
        'Content-Type': contentType,
        'Content-Length': data.length,
        'Cache-Control': cacheControl,
        ...SECURITY_HEADERS,
      });
      res.end(data);
    }
  });
});

server.on('error', (e) => {
  console.error('Server error:', e);
});

process.on('uncaughtException', (e) => {
  console.error('Uncaught:', e);
});

server.listen(PORT, '0.0.0.0', () => {
  console.log(`Server running on http://0.0.0.0:${PORT} (gzip enabled)`);
});