cyverse/nginx_novnc_auth

Name: nginx_novnc_auth

Owner: CyVerse

Description: Authentication for noVNC via Nginx

Forked from: julianpistorius/nginx_novnc_auth

Created: 2016-04-22 19:59:36.0

Updated: 2017-01-06 19:31:49.0

Pushed: 2017-10-04 23:23:22.0

Homepage:

Size: 49

Language: Python

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

Nginx NoVNC Auth

Provides a subrequest server for verifying the authenticity of transparent proxy requests

Dependencies & Setup

• nginx (–with-http_auth_request_module)
• uwsgi
• python-uwsgi-plugin
• python packages in requirements.txt

Configuration

The following variables will need to be defined:

DESKTOP_SIGNING_SECRET_KEY = '<signing-secret-key-value>'
DESKTOP_SIGNING_SALT = '<signing-salt-secret-value>'
DESKTOP_FP_SECRET_KEY = '<fingerprint-secret-key-value>'
DESKTOP_FP_SALT = '<fingerprint-salt-secret-value>'
AGE = # (int) max age for a timed signature to be considered valid

Nginx

We use a /etc/nginx/locations directory to specific the locations for a site. Any conf(s) defined within <base-repo>/nginx/locations should be symlinked into /etc/nginx/locations.

We include this path within the symlinked /etc/nginx/sites-enabled/site.conf:

er {
listen  443;
# ...
# ...
# at the bottom
include locations/*.conf;

License

See LICENSE.txt

Authors

• Julian Pistorius
• Andrew Lenards
• Steve Gregory