Added support for basic HTTP auth to allow Kasts functionality for self-hosted gpodder

[ijustlovemath]

Tested to work with Kasts on Arch Linux. This setup requires the following:

1. Reverse proxy behind nginx:

/etc/nginx/available-sites/yoursite.com

server {                                                                                                                                                                                                                           
    listen 3005 ssl;                                                                                                                                                                                                               
                                                                                                                                                                                                                                   
    server_name yoursite.com;                                                                                                                                                                                                     
                                                                                                                                                                                                                                   
    ssl_certificate /etc/letsencrypt/live/yoursite.com/fullchain.pem;                                                                                                                                                             
    ssl_certificate_key /etc/letsencrypt/live/yoursite.com/privkey.pem;                                                                                                                                                           
    include /etc/letsencrypt/options-ssl-nginx.conf;                                                                                                                                                                               
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;                                                                                                                                                                                 
                                                                                                                                                                                                                                   
    location / {                                                                                                                                                                                                                   
            proxy_pass         http://127.0.0.1:3050/;                                                                                                                                                                             
            proxy_redirect     off;                                                                                                                                                                                                
                                                                                                                                                                                                                                   
            proxy_set_header   Host             $host;                                                                                                                                                                             
            proxy_set_header   X-Real-IP        $remote_addr;                                                                                                                                                                      
            proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;                                                                                                                                                        
                                                                                                                                                                                                                                   
            client_max_body_size       10m;                                                                                                                                                                                        
            client_body_buffer_size    128k;                                                                                                                                                                                       
                                                                                                                                                                                                                                   
            proxy_connect_timeout      90;                                                                                                                                                                                         
            proxy_send_timeout         90;                                                                                                                                                                                         
            proxy_read_timeout         90;                                                                                                                                                                                         
                                                                                                                                                                                                                                   
            proxy_buffer_size          4k;                                                                                                                                                                                         
            proxy_buffers              4 32k;                                                                                                                                                                                      
            proxy_busy_buffers_size    64k;                                                                                                                                                                                        
            proxy_temp_file_write_size 64k;                                                                                                                                                                                        
    }                                                                                                                                                                                                                              
}                                                                                                                                                                                                                                  

2. A systemd service (customized to my deployment, you'll have to change some user values):

/etc/systemd/system/gpodder2go.service

[Unit]                                                                                                                                                                                                                             
Description=gpodder2go Service                                                                                                                                                                                                     
After=network-online.target                                                                                                                                                                                                        
Wants=network-online.target                                                                                                                                                                                                        
                                                                                                                                                                                                                                   
[Service]                                                                                                                                                                                                                          
Type=simple                                                                                                                                                                                                                        
ExecStart=/home/jer/gpodder2go/gpodder2go serve --addr 127.0.0.1:3050                                                                                                                                                              
WorkingDirectory=/home/jer/gpodder2go                                                                                                                                                                                              
# comment this if using a user service                                                                                                                                                                                             
User=jer                                                                                                                                                                                                                           
                                                                                                                                                                                                                                   
# Environment variable (intentionally left blank)                                                                                                                                                                                  
Environment=VERIFIER_SECRET_KEY=foo54bar54baz62environmental                                                                                                                                                                       
                                                                                                                                                                                                                                   
# ---- Security / sandboxing ----                                                                                                                                                                                                  
                                                                                                                                                                                                                                   
# Do not grant any extra privileges                                                                                                                                                                                                
#NoNewPrivileges=yes                                                                                                                                                                                                               
                                                                                                                                                                                                                                   
# Isolate /tmp                                                                                                                                                                                                                     
PrivateTmp=yes     
[Install]
WantedBy=default.target

3. A built version of this repository; mine's at ~/gpodder2go

4.During setup, youll "use custom server" and login with your username and password (not name, not email; see column 2 in g2g.db for this value). You will use the URL "https://yoursite.com:3005". The port here is from the "listen" directive of the nginx config

[ijustlovemath]

Apologies if this isn't very "go-ey"; this is one of my first projects with the language. I'm sure there's a way to do this "right", but I mainly wanted to hack together something that works and is reproducible for my use case. If you have specific feedback, I'll try to address in a future commit!

Thanks for this software, it's great!