notakey/authproxy repository overview

In cases when Notakey appliance is hosted in the cloud and you still want to use Radius authentication for VPN or your linux machine we offer to host only proxy container in the LAN and keep everything safe. RADIUS protocol is not secure enough to use it outside company's network. Comunication in between Radius Proxy and The Notakey appliance is encrypted, certificate based and secure. More information you can find at https://documentation.notakey.com⁠. How to install appliance: https://documentation.notakey.com/naa/#appliance-installation⁠

⁠How to run:

docker run --name auth-proxy \
  -e NOTAKEY_HOST="https://demo.notakey.com/api" \
  -e NOTAKEY_ACCESS_ID="123" \
  -p 1812:1812/udp \
  -e LISTEN_ADDRESS=0.0.0.0 \
  -e ADDRESS_SECRET_IN=0.0.0.0:secret_in \
  -e DOWNSTREAM_ADDRESS=10.0.1.21 \
  -e SECRET_OUT=secret_out \
  notakey/authproxy:latest

⁠Required ENV

• NOTAKEY_HOST - Notakey appliance
• NOTAKEY_ACCESS_ID - ID of application
• ADDRESS_SECRET_IN - secret from device we enforce 2FA
• DOWNSTREAM_ADDRESS - Radius server
• SECRET_OUT - Radius server secret

⁠Optional ENV

• NOTAKEY_TIMEOUT (default 5s)
• LISTEN_ADDRESS (default 127.0.0.1)
• PORT_IN (default 1812)
• PORT_OUT (default 1812)
• PROXY_SEND_TIMEOUT (default 5)
• PROXY_READ_TIMEOUT (default 5)
• CISCO_ACL_PASSTHROUGH (if firewall rules are enforced)
• MESSAGE_DESCRIPTION= (custom msg. like - "Proceed with login to VPN as {0}? 😎"