sheppy/athq-vm-management
1
0
Fork 0
mirror of https://github.com/FAUSheppy/athq-vm-management synced 2025-12-06 05:41:35 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: support for cert based authentication

Browse Source
This commit is contained in:
Johnathen Sheppard
2023-05-28 17:25:25 +02:00
parent 7567dbaa4b
commit 09c37b2a65
5 changed files with 35 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
vm.py
View File

@@ -134,11 +134,23 @@ class VM:
compositeName = "-".join((self.hostname, subdomain["name"].replace(".","-")))
targetport = subdomain.get("port") or 80
# build cert group #
if subdomain.get("cert-group"):
cert_group_name = subdomain.get("cert-group")
header_line = "proxy_set_header X-Nginx-Cert-Auth $allow_group_{};".format(cert_group_name)
cert_optional = True
else:
header_line = "proxy_set_header X-Nginx-Cert-Auth false;"
cert_optional = False
component = template.render(targetip=self.ip, targetport=targetport,
servernames=[subdomain["name"]], comment=compositeName,
proxy_pass_blob=self.proxy_pass_blob, acme=not self.noTerminateACME,
basicauth=subdomain.get("basicauth"),
extra_location=subdomain.get("extra-location"))
extra_location=subdomain.get("extra-location"),
cert_optional=cert_optional,
cert_header_line=header_line)
components.append(component)
return components