Simple Ruby/WEBrick wrapper to serve stuff over HTTPS/TLS/SSL

swebrick.rb

#!/usr/bin/ruby

require 'webrick/https'
require 'openssl'
require 'optparse'

# Defaults
cfg = {
  port: 8443,
  root: "."
}

# Command line options
OptionParser.new do |opts|
  opts.banner = "Usage: #{$0} [options]"

  opts.on("-l", "--letsencrypt DIR", "Use Let's Encrypt certificate and private key from DIR") do |l|
    cfg[:letsencrypt] = l
  end

  opts.on("-c", "--cert FILE", "Use cert from FILE") do |c|
    cfg[:cert] = c
  end

  opts.on("-k", "--key FILE", "Use private key from FILE") do |k|
    cfg[:key] = k
  end

  opts.on("-p", "--port INT", "Listen on port INT (default: 8443)") do |p|
    cfg[:port] = p
  end

  opts.on("-r", "--root DIR", "Use DIR as document root (default: ./)") do |r|
    cfg[:root] = r
  end

  opts.on("-h", "--help", "Show this help and exit") do
    puts opts
    exit
  end
end.parse!

# Let's Encrypt Magic
if !cfg[:letsencrypt].nil? && Dir.exist?(cfg[:letsencrypt])
  cfg[:cert] = File.join(cfg[:letsencrypt], "cert.pem")
  cfg[:key] = File.join(cfg[:letsencrypt], "privkey.pem")
end

# The actual stuff
WEBrick::HTTPServer.new(
  Port: cfg[:port],
  DocumentRoot: cfg[:root],
  SSLEnable: true,
  SSLCertificate: OpenSSL::X509::Certificate.new(File.open(cfg[:cert]).read),
  SSLPrivateKey: OpenSSL::PKey::RSA.new(File.open(cfg[:key]).read)
).start