upd

Author: Satont

apps/api-gql/internal/delivery/gql/resolvers/user.resolver.go

@@ -5,6 +5,7 @@ import (
 	"os"
 	"os/exec"
 	"runtime"
+	"strings"
 
 	"github.com/pterm/pterm"
 	"github.com/twirapp/twir/cli/internal/shell"
@@ -20,34 +21,49 @@ var Cmd = &cli.Command{
 			return err
 		}
 
+		caddyFindCmd := exec.Command(
+			"go",
+			"tool",
+			"-n", // -n prints the command without running it, giving us the path
+			"github.com/caddyserver/caddy/v2/cmd/caddy",
+		)
+		caddyFindCmd.Dir = wd
+		caddyPathBytes, err := caddyFindCmd.Output()
+		if err != nil {
+			return fmt.Errorf("failed to find Caddy path: %v", err)
+		}
+		caddyPath := strings.TrimSpace(string(caddyPathBytes))
+
 		if runtime.GOOS == "linux" {
-			caddyFindCmd := exec.Command(
-				"go",
-				"tool",
-				"-n",
-				"github.com/caddyserver/caddy/v2/cmd/caddy",
-			)
-			caddyFindCmd.Dir = wd
-			caddyFindCmdOutPut, err := caddyFindCmd.Output()
+			// Check if the capability is already set
+			getcapCmd := exec.Command("getcap", caddyPath)
+			getcapCmd.Dir = wd
+			getcapOutput, err := getcapCmd.Output()
 			if err != nil {
-				return err
+				// If getcap fails (e.g., command not found), proceed cautiously
+				pterm.Warning.Println("Could not check capabilities; assuming they need to be set")
 			}
 
-			pterm.Warning.Println("!!! ATTENTION !!!")
-			pterm.Info.Println("We need your sudo password to bind web server to port 443")
-
-			if err := shell.ExecCommand(
-				shell.ExecCommandOpts{
-					Command: fmt.Sprintf(
-						`sudo setcap 'cap_net_bind_service=+ep' %s`,
-						string(caddyFindCmdOutPut),
-					),
-					Stdout: os.Stdout,
-					Stderr: os.Stderr,
-					Pwd:    wd,
-				},
-			); err != nil {
-				return err
+			// Check if cap_net_bind_service is present
+			if !strings.Contains(string(getcapOutput), "cap_net_bind_service") {
+				pterm.Warning.Println("!!! ATTENTION !!!")
+				pterm.Warning.Println("We need your sudo password to bind web server to port 443 (this is a one-time setup)")
+
+				// Set the capability if missing
+				setcapCmd := fmt.Sprintf("sudo setcap 'cap_net_bind_service=+ep' %s", caddyPath)
+				if err := shell.ExecCommand(
+					shell.ExecCommandOpts{
+						Command: setcapCmd,
+						Stdout:  os.Stdout,
+						Stderr:  os.Stderr,
+						Pwd:     wd,
+					},
+				); err != nil {
+					return fmt.Errorf("failed to set capability: %v", err)
+				}
+				pterm.Success.Println("Capability set successfully; no further sudo prompts needed unless Caddy binary changes")
+			} else {
+				pterm.Info.Println("Caddy already has permission to bind to port 443; no sudo required")
 			}
 		}