/*
    * Copyright 2022 The Netty Project
    *
    * The Netty Project licenses this file to you under the Apache License,
    * version 2.0 (the "License"); you may not use this file except in compliance
    * with the License. You may obtain a copy of the License at:
    *
    *   https://www.apache.org/licenses/LICENSE-2.0
    *
   * Unless required by applicable law or agreed to in writing, software
   * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
   * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
   * License for the specific language governing permissions and limitations
   * under the License.
   */
  package io.netty.example.http2.file;
  
  import io.netty.bootstrap.ServerBootstrap;
  import io.netty.channel.Channel;
  import io.netty.channel.EventLoopGroup;
  import io.netty.channel.MultiThreadIoEventLoopGroup;
  import io.netty.channel.nio.NioIoHandler;
  import io.netty.channel.socket.nio.NioServerSocketChannel;
  import io.netty.handler.codec.http2.Http2SecurityUtil;
  import io.netty.handler.logging.LogLevel;
  import io.netty.handler.logging.LoggingHandler;
  import io.netty.handler.ssl.ApplicationProtocolConfig;
  import io.netty.handler.ssl.ApplicationProtocolNames;
  import io.netty.handler.ssl.SslContext;
  import io.netty.handler.ssl.SslContextBuilder;
  import io.netty.handler.ssl.SslProvider;
  import io.netty.handler.ssl.SupportedCipherSuiteFilter;
  import io.netty.pkitesting.CertificateBuilder;
  import io.netty.pkitesting.X509Bundle;
  
  public final class Http2StaticFileServer {
  
      private static final int PORT = Integer.parseInt(System.getProperty("port", "8443"));
  
      public static void main(String[] args) throws Exception {
          X509Bundle ssc = new CertificateBuilder()
                  .subject("cn=localhost")
                  .setIsCertificateAuthority(true)
                  .buildSelfSigned();
  
          SslContext sslCtx = SslContextBuilder.forServer(ssc.toKeyManagerFactory())
                  .sslProvider(SslProvider.JDK)
                  .ciphers(Http2SecurityUtil.CIPHERS, SupportedCipherSuiteFilter.INSTANCE)
                  .applicationProtocolConfig(new ApplicationProtocolConfig(
                          ApplicationProtocolConfig.Protocol.ALPN,
                          // NO_ADVERTISE is currently the only mode supported by both OpenSsl and JDK providers.
                          ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
                          // ACCEPT is currently the only mode supported by both OpenSsl and JDK providers.
                          ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
                          ApplicationProtocolNames.HTTP_2,
                          ApplicationProtocolNames.HTTP_1_1))
                  .build();
  
          EventLoopGroup bossGroup = new MultiThreadIoEventLoopGroup(2, NioIoHandler.newFactory());
          EventLoopGroup workerGroup = new MultiThreadIoEventLoopGroup(4, NioIoHandler.newFactory());
          try {
              ServerBootstrap b = new ServerBootstrap();
              b.group(bossGroup, workerGroup)
                      .channel(NioServerSocketChannel.class)
                      .handler(new LoggingHandler(LogLevel.INFO))
                      .childHandler(new Http2StaticFileServerInitializer(sslCtx));
  
              Channel ch = b.bind(PORT).sync().channel();
  
              System.out.println("Open your web browser and navigate to https://127.0.0.1:" + PORT + '/');
  
              ch.closeFuture().sync();
          } finally {
              bossGroup.shutdownGracefully();
              workerGroup.shutdownGracefully();
          }
      }
  }