2026-05-01 15:51:12 +00:00
// Custom Node server. Intercepts requests by Host header.
// - Host matches active redirect-domain → log hit + 301/302 + end (skip Next.js)
// - Else → delegate to Next.js (admin UI / API)
//
// Run via: tsx server.ts
import http from "http" ;
import { parse } from "url" ;
import next from "next" ;
import { resolveHost , isAdminHost } from "./lib/redirect-resolver" ;
2026-05-01 17:22:04 +00:00
import { recordHit , shouldRecord } from "./lib/hits" ;
import { renderSunsetPage } from "./lib/sunset-html" ;
2026-05-01 19:36:24 +00:00
import { isBlocked } from "./lib/blocklist" ;
import { startJobs } from "./lib/jobs" ;
2026-05-06 17:43:41 +00:00
import { hashIp , getSetting } from "./lib/db" ;
import { parseAllowlist , isIpAllowed } from "./lib/ip-allowlist" ;
2026-05-01 15:51:12 +00:00
const dev = process . env . NODE_ENV !== "production" ;
const port = parseInt ( process . env . PORT || "3000" , 10 ) ;
const hostname = process . env . HOSTNAME || "0.0.0.0" ;
const app = next ( { dev , hostname , port } ) ;
const handle = app . getRequestHandler ( ) ;
app . prepare ( ) . then ( ( ) = > {
2026-05-01 19:36:24 +00:00
startJobs ( ) ;
2026-05-01 15:51:12 +00:00
const server = http . createServer ( async ( req , res ) = > {
try {
const host = ( req . headers . host || "" ) . split ( ":" ) [ 0 ] . toLowerCase ( ) ;
const parsedUrl = parse ( req . url || "/" , true ) ;
if ( host && ! isAdminHost ( host ) ) {
const resolved = resolveHost ( host ) ;
if ( resolved ) {
const ip =
( ( req . headers [ "x-forwarded-for" ] || "" ) as string ) . split ( "," ) [ 0 ] . trim ( ) ||
req . socket . remoteAddress ||
"unknown" ;
2026-05-01 17:22:04 +00:00
const ua = ( req . headers [ "user-agent" ] as string ) || null ;
2026-05-01 18:56:10 +00:00
// Hash IP early so we can use it for the scan-detector check
const ipHash = hashIp ( ip ) ;
2026-05-01 19:36:24 +00:00
// Persistent blocklist: drop without recording or redirecting
if ( isBlocked ( ipHash ) ) {
res . writeHead ( 403 , { "Content-Type" : "text/plain" } ) ;
res . end ( "Blocked" ) ;
return ;
}
2026-05-01 19:01:44 +00:00
const signals = {
accept : ( req . headers [ "accept" ] as string ) || null ,
acceptLanguage : ( req . headers [ "accept-language" ] as string ) || null ,
secFetchMode : ( req . headers [ "sec-fetch-mode" ] as string ) || null ,
secFetchDest : ( req . headers [ "sec-fetch-dest" ] as string ) || null ,
secFetchSite : ( req . headers [ "sec-fetch-site" ] as string ) || null ,
} ;
if ( shouldRecord ( req . method || "GET" , req . url || "/" , ua , ipHash , signals ) ) {
2026-05-01 17:22:04 +00:00
recordHit ( {
domain_id : resolved.domain_id ,
ip ,
user_agent : ua ,
referer : ( req . headers [ "referer" ] as string ) || null ,
path : req.url || null ,
} ) . catch ( ( ) = > { } ) ;
}
// Sunset notice: serve interstitial unless user clicked "Weiter" (?nr_continue=1)
const reqPath = req . url || "/" ;
const isContinue = parsedUrl . query ? . nr_continue === "1" ;
if ( resolved . sunset && ! isContinue ) {
const html = renderSunsetPage ( {
domain : resolved.domain ,
target : resolved.target_url ,
preservePath : resolved.preserve_path ,
reqPath ,
cfg : resolved.sunset ,
} ) ;
res . writeHead ( 200 , {
"Content-Type" : "text/html; charset=utf-8" ,
"Cache-Control" : "no-store, no-cache, must-revalidate, max-age=0" ,
} ) ;
res . end ( html ) ;
return ;
}
2026-05-01 15:51:12 +00:00
const target = resolved . preserve_path
? resolved . target_url + ( parsedUrl . path || "" )
: resolved . target_url ;
2026-05-01 16:53:46 +00:00
res . writeHead ( resolved . redirect_code || 302 , {
Location : target ,
"Cache-Control" : "no-store, no-cache, must-revalidate, max-age=0" ,
Pragma : "no-cache" ,
Expires : "0" ,
} ) ;
2026-05-01 15:51:12 +00:00
res . end ( ) ;
return ;
}
res . writeHead ( 404 , { "Content-Type" : "text/html; charset=utf-8" } ) ;
res . end (
` <!doctype html><html><head><title>Domain not configured</title><style>body{background:#0a0c10;color:#e5e7eb;font-family:ui-monospace,monospace;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0}</style></head><body><div><h1>Domain nicht konfiguriert</h1><p>Diese Domain ist auf diesem Server nicht eingerichtet.</p></div></body></html> `
) ;
return ;
}
2026-05-07 13:29:40 +00:00
// IP allowlist for admin UI (skips /api/v1 public API and loopback)
2026-05-06 17:43:41 +00:00
const reqPath = parsedUrl . pathname || "/" ;
if ( ! reqPath . startsWith ( "/api/v1" ) ) {
const allowlist = parseAllowlist ( getSetting ( "admin_ip_allowlist" ) ) ;
if ( allowlist . length > 0 ) {
const clientIp =
( ( req . headers [ "x-forwarded-for" ] || "" ) as string ) . split ( "," ) [ 0 ] . trim ( ) ||
req . socket . remoteAddress ||
"unknown" ;
2026-05-07 13:29:40 +00:00
const isLoopback = clientIp === "127.0.0.1" || clientIp === "::1" || clientIp . startsWith ( "::ffff:127." ) ;
if ( ! isLoopback && ! isIpAllowed ( clientIp , allowlist ) ) {
2026-05-06 17:43:41 +00:00
res . writeHead ( 403 , { "Content-Type" : "text/html; charset=utf-8" } ) ;
res . end (
` <!doctype html><html><head><title>403 Forbidden</title><style>body{background:#0a0c10;color:#e5e7eb;font-family:ui-monospace,monospace;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0}</style></head><body><div style="text-align:center"><h1 style="color:#f87171">403 Forbidden</h1><p>Deine IP-Adresse (<code> ${ clientIp } </code>) ist nicht in der Zugriffsliste.</p></div></body></html> `
) ;
return ;
}
}
}
2026-05-01 15:51:12 +00:00
await handle ( req , res , parsedUrl ) ;
} catch ( err ) {
console . error ( "[server] error" , err ) ;
res . statusCode = 500 ;
res . end ( "Internal Server Error" ) ;
}
} ) ;
server . listen ( port , hostname , ( ) = > {
console . log ( ` > CoreX NexRedirect on http:// ${ hostname } : ${ port } ( ${ dev ? "dev" : "prod" } ) ` ) ;
} ) ;
} ) . catch ( ( err ) = > {
console . error ( "Failed to start Next.js" , err ) ;
process . exit ( 1 ) ;
} ) ;
