Add SSL config

Author: breuleux

src/paperoni/__main__.py

@@ -961,12 +961,18 @@ async def run(self):
             }
         with gifnoc.overlay(overrides):
             app = create_app()
+            ssl_config = config.server.ssl
+            ssl_kwargs = {}
+            if ssl_config and ssl_config.enabled:
+                ssl_kwargs["ssl_certfile"] = ssl_config.cert_file
+                ssl_kwargs["ssl_keyfile"] = ssl_config.key_file
             server = uvicorn.Server(
                 uvicorn.Config(
                     app,
                     host=config.server.host if self.host is None else self.host,
                     port=config.server.port if self.port is None else self.port,
                     reload=self.reload,
+                    **ssl_kwargs,
                 )
             )
             await server.serve()

src/paperoni/config.py

@@ -1,5 +1,7 @@
 from dataclasses import dataclass, field
+from functools import cached_property
 from pathlib import Path
+from tempfile import NamedTemporaryFile
 from typing import Literal
 
 import gifnoc
@@ -34,6 +36,25 @@ class Refine:
     prompt: TaggedSubclass[Prompt] = field(default_factory=GenAIPrompt)
 
 
+@dataclass(kw_only=True)
+class SSLConfig:
+    enabled: bool = True
+    cert: str
+    key: Secret[str]
+
+    @cached_property
+    def cert_file(self):
+        with NamedTemporaryFile(mode="w", suffix=".pem", delete=False) as cf:
+            cf.write(self.cert)
+            return cf.name
+
+    @cached_property
+    def key_file(self):
+        with NamedTemporaryFile(mode="w", suffix=".pem", delete=False) as kf:
+            kf.write(self.key)
+            return kf.name
+
+
 @dataclass(kw_only=True)
 class Server:
     host: str = "localhost"
@@ -43,6 +64,7 @@ class Server:
     max_results: int = 10000
     auth: OAuthManager = None
     assets: Path = None
+    ssl: SSLConfig = None
 
     def __post_init__(self):
         if self.external_host is None: