m2i3/config-server repository overview

⁠config-server

A simple HTTPS configuration server using Client Certificates for authentication.

The server prevents listing the base locations to avoid leading configuration of all environments.

⁠Requirements

This configuration is designed with Docker in mind and requires the m2i3app-client⁠ to be utilized.

⁠Test Certificates and Keys

The generation of the test certificates and keys are based on an article about Client Side Certificate Auth in Nginx⁠.

The keys can be generated with "make create-certs". The container depends on it in order to execute the tests.

⁠Sample Usage

Once enabled, the server can be utilised to download different levels of configurations or even propagate scripts

example 1 - downloading a complete directory structure:

wget --certificate=/mnt/hostpwd/certs/client.crt --private-key=/mnt/hostpwd/certs/client.key -e robots=off --no-check-certificate --timestamping -r --no-parent --reject "index.html*" -P ./ -nH --cut-dirs=1  $CFG_SERVER/m2i3app-router.4rdj09j09j/

example 2 - downloading a script and executing it

curl -k --key /mnt/hostpwd/certs/client.key --cert /mnt/hostpwd/certs/client.crt $CFG_SERVER/download-new-router-config.sh | bash