Server#

The server is responsible for accepting connections from clients, parsing their requests, and delivering them a response.

Default#

Starting your Droplet with a default server is simple.

import Vapor

let drop = Droplet()

drop.run()

The default server will bind to host 0.0.0.0 at port 8080.

Config#

If you are using a Config/servers.json file, this is where you can easily change your host and port or even boot multiple servers.

{
    "default": {
        "port": "$PORT:8080",
        "host": "0.0.0.0",
        "securityLayer": "none"
    }
}

The default servers.json is above. The port with try to resolve the environment variable $PORT or fallback to 8080.

Multiple#

You can start multiple servers in the same application. This is especially useful if you want to boot an HTTP and HTTPS server side by side.

{
    "plaintext": {
        "port": "80",
        "host": "vapor.codes",
        "securityLayer": "none"
    },
    "secure": {
        "port": "443",
        "host": "vapor.codes",
        "securityLayer": "tls",
        "tls": {
            "certificates": "none",
            "signature": "selfSigned"
        }
    },
}

TLS#

TLS (formerly SSL) can be configured with a variety of different certificate and signature types.

Verify#

Verificiation of hosts and certificates can be disabled. They are enabled by default.

Note: Be extremely careful when disabling these options.

"tls": {
   "verifyHost": false,
   "verifyCertificates": false
}

Certificates#

None#

"tls": {
    "certificates": "none"
}

Chain#

"tls": {
    "certificates": "chain",
    "chainFile": "/path/to/chainfile"
}

Files#

"tls": {
    "certificates": "files",
    "certificateFile": "/path/to/cert.pem",
    "privateKeyFile": "/path/to/key.pem"
}

Certificate Authority#

"tls": {
    "certificates": "ca"
}

Signature#

Self Signed#

"tls": {
    "signature": "selfSigned"
}

Signed File#

"tls": {
    "signature": "signedFile",
    "caCertificateFile": "/path/to/file"
}

Signed Directory#

"tls": {
    "signature": "signedDirectory",
    "caCertificateDirectory": "/path/to/dir"
}

Example#

Here is an example servers.json file using certificate files with a self signed signature and host verification redundantly set to true.

{
    "secure": {
        "port": "8443",
        "host": "0.0.0.0",
        "securityLayer": "tls",
        "tls": {
            "verifyHost": true,
            "certificates": "files",
            "certificateFile": "/vapor/certs/cert.pem",
            "privateKeyFile": "/vapor/certs/key.pem",
            "signature": "selfSigned"
        }
    }
}

Manual#

Servers can also be configured manually, without configuration files.

Note: If servers are configured programatically, they override any config settings.

Simple#

The run method on the Droplet takes a dictionary of server configuration objects. The key is the name of the server.

import Vapor

let drop = Droplet()

drop.run(servers: [
    "default": (host: "vapor.codes", port: 8080, securityLayer: .none)
]

TLS#

TLS can also be configured manually, and works similarly to the servers.json config files described above.

import Vapor
import TLS

let drop = Droplet()

let config = try TLS.Config(
    mode: .server,
    certificates: .files(
        certificateFile: "/Users/tanner/Desktop/certs/cert.pem", 
        privateKeyFile: "/Users/tanner/Desktop/certs/key.pem", 
        signature: .selfSigned
    ),
    verifyHost: true,
    verifyCertificates: true
)

drop.run(servers: [
    "plaintext": ("vapor.codes", 8080, .none),
    "secure": ("vapor.codes", 8443, .tls(config)),
])