private static void ConfigureKestrelEndpoints(
    WebApplicationBuilder builder,
    EndpointConfiguration config,
    ILogger logger)
{
    builder.WebHost.ConfigureKestrel((_, options) =>
    {
        var httpPort = config.Http?.Port ?? 6262;
        int? httpsPort = GetHttpsPort(config, httpPort);

        options.ListenAnyIP(httpPort);

        if (httpsPort.HasValue)
        {
            ConfigureHttps(options, httpsPort.Value, config.Https, logger, httpPort);
        }
        else
        {
            logger.LogInformation("Configuring HTTP endpoint only: HTTP {HttpPort}", httpPort);
        }
    });
}

private static int? GetHttpsPort(EndpointConfiguration config, int httpPort)
{
    if (config.Https?.Enabled != true) return null;

    var httpsPort = config.Https.Port ?? 6263;
    if (httpsPort == httpPort)
        throw new InvalidOperationException($"HTTP and HTTPS endpoint ports cannot be the same: {httpPort}");

    return httpsPort;
}

private static void ConfigureHttps(
    KestrelServerOptions options,
    int httpsPort,
    HttpsEndpointConfiguration? httpsConfig,
    ILogger logger,
    int httpPort)
{
    options.ListenAnyIP(httpsPort, listenOptions =>
    {
        var cert = httpsConfig?.Certificate;
        if (cert != null)
        {
            if (!string.IsNullOrWhiteSpace(cert.Password))
                listenOptions.UseHttps(cert.Path, cert.Password);
            else
                listenOptions.UseHttps(cert.Path);
        }
        else
        {
            listenOptions.UseHttps();
        }
    });

    logger.LogInformation("Configuring HTTP and HTTPS endpoints: HTTP {HttpPort}, HTTPS {HttpsPort}", httpPort, httpsPort);
}