You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Xe Iaso 4f1d6c53cb cmd/nginx-auth: create new Tailscale NGINX auth service (#4400) ... This conforms to the NGINX subrequest result authentication protocol[1] using the NGINX module `ngx_http_auth_request_module`. This is based on the example that @peterkeen provided on Twitter[2], but with several changes to make things more tightly locked down: * This listens over a UNIX socket instead of a TCP socket to prevent leakage to the network * This uses systemd socket activation so that systemd owns the socket and can then lock down the service to the bare minimum required to do its job without having to worry about dropping permissions * This provides additional information in HTTP response headers that can be useful for integrating with various services * This has a script to automagically create debian and redhat packages for easier distribution This will be written about on the Tailscale blog. There is more information in README.md. [1]: https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-subrequest-authentication/ [2]: https://github.com/peterkeen/tailscale/blob/main/cmd/nginx-auth-proxy/nginx-auth-proxy.go Signed-off-by: Xe Iaso <xe@tailscale.com>		2 years ago
..
addlicense	cmd/addlicense: add command to add licenseheaders to generated code	3 years ago
cloner	all: use any instead of interface{}	2 years ago
derper	cmd/derper: add --stun-port flag	2 years ago
derpprobe	all: use any instead of interface{}	2 years ago
hello	all: use strings.Cut even more	2 years ago
mkpkg	cmd/mkpkg: use package flag (#4373)	2 years ago
nginx-auth	cmd/nginx-auth: create new Tailscale NGINX auth service (#4400)	2 years ago
printdep	cmd/printdep: add flag to print out Go toolchain tarball URL	2 years ago
proxy-to-grafana	cmd/proxy-to-grafana: fix package doc code snippet	2 years ago
speedtest	cmd: upgrade to ffcli v3	3 years ago
tailscale	cmd/tailscale: add id-token subcommand	2 years ago
tailscaled	go.mod: bump netstack for clone reset fix (#4379)	2 years ago
testcontrol	all: use any instead of interface{}	2 years ago
tsshd	tempfork: temporarily fork gliderlabs/ssh and x/crypto/ssh	2 years ago