ralsina/faaso
1
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

Do basic auth in Caddy, but delegating user/pass auth to kemal

Browse Source
This commit is contained in:
Roberto Alsina 2024-07-07 11:07:34 -03:00
parent 3b45b6a28f
commit 30e447dc8a
5 changed files with 39 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
config/Caddyfile
View File

@ -1,18 +1,21 @@
{ {
http_port 8888 http_port 8888
https_port 8887 https_port 8887
local_certs local_certs
} }
http://*:8888 { http://*:8888 {
basicauth /admin/* { forward_auth /admin/* http://127.0.0.1:3000 {
admin {$FAASO_PASSWORD} uri http://127.0.0.1:3000
copy_headers {
Authorization
}
} }
handle_path /admin/terminal/* { handle_path /admin/terminal/* {
reverse_proxy /* http://127.0.0.1:7681 reverse_proxy /* http://127.0.0.1:7681
} }
handle_path /admin/* { handle_path /admin/* {
reverse_proxy /* http://127.0.0.1:3000 reverse_proxy /* http://127.0.0.1:3000
} }
} }

4
shard.lock
View File

@ -44,6 +44,10 @@ shards:
git: https://github.com/kemalcr/kemal.git git: https://github.com/kemalcr/kemal.git
version: 1.5.0 version: 1.5.0
kemal-basic-auth:
git: https://github.com/kemalcr/kemal-basic-auth.git
version: 1.0.0
radix: radix:
git: https://github.com/luislavena/radix.git git: https://github.com/luislavena/radix.git
version: 0.4.1 version: 0.4.1

6
shard.yml
View File

@ -16,7 +16,7 @@ license: MIT
dependencies: dependencies:
crest: crest:
github: mamantoha/crest github: mamantoha/crest
crinja: crinja:
github: straight-shoota/crinja github: straight-shoota/crinja
crystar: crystar:
@ -28,10 +28,12 @@ dependencies:
branch: add_exposed_ports branch: add_exposed_ports
kemal: kemal:
github: kemalcr/kemal github: kemalcr/kemal
kemal-basic-auth:
github: kemalcr/kemal-basic-auth
rucksack: rucksack:
github: busyloop/rucksack github: busyloop/rucksack
inotify: inotify:
github: petoem/inotify.cr github: petoem/inotify.cr
scripts: scripts:
postinstall: cat .rucksack >> bin/faaso postinstall: cat .rucksack >> bin/faaso

3
src/daemon/main.cr
View File

@ -5,9 +5,12 @@ require "./terminal.cr"
require "compress/gzip" require "compress/gzip"
require "crystar" require "crystar"
require "docr" require "docr"
require "kemal-basic-auth"
require "kemal" require "kemal"
require "uuid" require "uuid"
basic_auth "admin", "admin"
macro version macro version
"{{ `grep version shard.yml | cut -d: -f2` }}".strip() "{{ `grep version shard.yml | cut -d: -f2` }}".strip()
end end

27
src/daemon/proxy.cr
View File

@ -30,24 +30,25 @@ module Proxy
containers = docker_api.containers.list(all: true) containers = docker_api.containers.list(all: true)
config = <<-CONFIG config = <<-CONFIG
{ {
http_port 8888 http_port 8888
https_port 8887 https_port 8887
local_certs local_certs
} }
http://*:8888 { http://*:8888 {
basicauth /admin/* { forward_auth /admin/* http://127.0.0.1:3000 {
admin {$FAASO_PASSWORD} uri http://127.0.0.1:3000
copy_headers {
Authorization
}
} }
handle_path /admin/terminal/* { handle_path /admin/terminal/* {
reverse_proxy /* http://127.0.0.1:7681 reverse_proxy /* http://127.0.0.1:7681
} }
handle_path /admin/* { handle_path /admin/* {
reverse_proxy /* http://127.0.0.1:3000 reverse_proxy /* http://127.0.0.1:3000
} }
CONFIG CONFIG
funkos = Funko::Funko.from_docker funkos = Funko::Funko.from_docker