Implement confidential OIDC authentication boundary

app/Main.hs

@@ -7,10 +7,10 @@ import           Database.PostgreSQL.Simple (Only (..))
 import           Network.Wai.Handler.Warp
   ( HostPreference
   , defaultSettings
-  , runSettings
   , setHost
   , setPort
   )
+import           Network.Wai.Handler.WarpTLS (runTLS, tlsSettings)
 import           Nuthatch
 import           Nuthatch.Db (migrate, query_, withDb)
 import           Nuthatch.Redis (withRedis)
@@ -39,10 +39,10 @@ main = do
           <> cfgListenHost cfg
           <> ":"
           <> show (cfgListenPort cfg)
-          <> " (auth="
-          <> show (cfgAuthMode cfg)
-          <> ")"
-      runSettings settings (application env)
+      runTLS
+        (tlsSettings (cfgTlsCertPath cfg) (cfgTlsKeyPath cfg))
+        settings
+        (application env)
 
 waitForPostgres :: Config -> IO ()
 waitForPostgres cfg = go (60 :: Int)