root: connect to backend via socket (#6720)

* root: connect to gunicorn via socket

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* put socket in temp folder

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* use non-socket connection for debug

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* don't hardcode local url

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* fix dev_server missing websocket

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* dedupe logging config between gunicorn and main app

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

* slight refactor for proxy errors

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

---------

Signed-off-by: Jens Langhammer <jens@goauthentik.io>

internal/gounicorn/gounicorn.go

@@ -1,7 +1,6 @@
 package gounicorn
 
 import (
-	"net/http"
 	"os"
 	"os/exec"
 	"runtime"
@@ -10,10 +9,10 @@ import (
 
 	log "github.com/sirupsen/logrus"
 	"goauthentik.io/internal/config"
-	"goauthentik.io/internal/utils/web"
 )
 
 type GoUnicorn struct {
+	Healthcheck     func() bool
 	HealthyCallback func()
 
 	log     *log.Entry
@@ -23,9 +22,10 @@ type GoUnicorn struct {
 	alive   bool
 }
 
-func New() *GoUnicorn {
+func New(healthcheck func() bool) *GoUnicorn {
 	logger := log.WithField("logger", "authentik.router.unicorn")
 	g := &GoUnicorn{
+		Healthcheck:     healthcheck,
 		log:             logger,
 		started:         false,
 		killed:          false,
@@ -41,7 +41,7 @@ func (g *GoUnicorn) initCmd() {
 	args := []string{"-c", "./lifecycle/gunicorn.conf.py", "authentik.root.asgi:application"}
 	if config.Get().Debug {
 		command = "./manage.py"
-		args = []string{"runserver"}
+		args = []string{"dev_server"}
 	}
 	g.log.WithField("args", args).WithField("cmd", command).Debug("Starting gunicorn")
 	g.p = exec.Command(command, args...)
@@ -69,22 +69,11 @@ func (g *GoUnicorn) Start() error {
 
 func (g *GoUnicorn) healthcheck() {
 	g.log.Debug("starting healthcheck")
-	h := &http.Client{
-		Transport: web.NewUserAgentTransport("goauthentik.io/proxy/healthcheck", http.DefaultTransport),
-	}
-	check := func() bool {
-		res, err := h.Get("http://localhost:8000/-/health/live/")
-		if err == nil && res.StatusCode == 204 {
-			g.alive = true
-			return true
-		}
-		return false
-	}
-
 	// Default healthcheck is every 1 second on startup
 	// once we've been healthy once, increase to 30 seconds
 	for range time.Tick(time.Second) {
-		if check() {
+		if g.Healthcheck() {
+			g.alive = true
 			g.log.Info("backend is alive, backing off with healthchecks")
 			g.HealthyCallback()
 			break
@@ -92,7 +81,7 @@ func (g *GoUnicorn) healthcheck() {
 		g.log.Debug("backend not alive yet")
 	}
 	for range time.Tick(30 * time.Second) {
-		check()
+		g.Healthcheck()
 	}
 }