{"id":16941189,"url":"https://github.com/greenpau/caddy-security-secrets-aws-secrets-manager","last_synced_at":"2026-04-17T01:02:16.968Z","repository":{"id":65217415,"uuid":"586626445","full_name":"greenpau/caddy-security-secrets-aws-secrets-manager","owner":"greenpau","description":"Caddy Security Secrets Plugin for AWS Secrets Manager Integration","archived":false,"fork":false,"pushed_at":"2023-01-12T23:46:08.000Z","size":103,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-04-14T00:19:39.444Z","etag":null,"topics":["aws","aws-secrets-manager","caddy-plugin","caddy2","security"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/greenpau.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null}},"created_at":"2023-01-08T19:35:35.000Z","updated_at":"2023-01-12T23:05:32.000Z","dependencies_parsed_at":"2023-01-15T15:15:21.586Z","dependency_job_id":null,"html_url":"https://github.com/greenpau/caddy-security-secrets-aws-secrets-manager","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/greenpau%2Fcaddy-security-secrets-aws-secrets-manager","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/greenpau%2Fcaddy-security-secrets-aws-secrets-manager/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/greenpau%2Fcaddy-security-secrets-aws-secrets-manager/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/greenpau%2Fcaddy-security-secrets-aws-secrets-manager/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/greenpau","download_url":"https://codeload.github.com/greenpau/caddy-security-secrets-aws-secrets-manager/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243707971,"owners_count":20334739,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aws","aws-secrets-manager","caddy-plugin","caddy2","security"],"created_at":"2024-10-13T21:08:55.470Z","updated_at":"2026-04-17T01:02:11.888Z","avatar_url":"https://github.com/greenpau.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# caddy-security-secrets-aws-secrets-manager\n\n[![build](https://github.com/greenpau/caddy-security-secrets-aws-secrets-manager/actions/workflows/build.yml/badge.svg)](https://github.com/greenpau/caddy-security-secrets-aws-secrets-manager/actions/workflows/build.yml)\n[![docs](https://img.shields.io/badge/godoc-reference-blue.svg)](https://pkg.go.dev/github.com/greenpau/caddy-security-secrets-aws-secrets-manager)\n\n[Caddy Security](https://github.com/greenpau/caddy-security) Secrets Plugin\nfor AWS Secrets Manager Integration.\n\n\u003c!-- begin-markdown-toc --\u003e\n## Table of Contents\n\n* [Getting Started](#getting-started)\n  * [AWS Secrets Manager](#aws-secrets-manager)\n  * [Building Caddy](#building-caddy)\n  * [Caddyfile Usage](#caddyfile-usage)\n    * [Without Plugin](#without-plugin)\n    * [Plugin Configuration](#plugin-configuration)\n\n\u003c!-- end-markdown-toc --\u003e\n\n## Getting Started\n\n### AWS Secrets Manager\n\nPlease follow this [doc](https://github.com/greenpau/go-authcrunch-secrets-aws-secrets-manager#getting-started)\nto set up AWS IAM Policy, Rolem and Secrets.\n\n### Building Caddy\n\nFor `secrets aws_secrets_manager` directives to work, build `caddy` with the\n`latest` version of this plugin.\n\n```bash\nxcaddy build ... \\\n  --with github.com/greenpau/caddy-security-secrets-aws-secrets-manager@latest\n```\n\n### Caddyfile Usage\n\n#### Without Plugin\n\nThe following is a snippet of `Caddyfile` without the use of this plugin.\n\n```\n{\n        security {\n                local identity store localdb {\n                        realm local\n                        path /etc/caddy/users.json\n                        user jsmith {\n                                name John Smith\n                                email jsmith@localhost.localdomain\n                                password \"bcrypt:10:$2a$10$iqq53VjdCwknBSBrnyLd9OH1Mfh6kqPezMMy6h6F41iLdVDkj13I6\" overwrite\n                                roles authp/admin authp/user\n                        }\n                }\n\n                authentication portal myportal {\n                        crypto default token lifetime 3600\n                        crypto key sign-verify b006d65b-c923-46a1-8da1-7d52558508fe\n                        enable identity store localdb\n                }\n        }\n}\n```\n\n#### Plugin Configuration\n\nNow, here is the configuration using `secrets` retrieved from AWS Secrets Manager:\n\n```\n{\n\tsecurity {\n\t\tsecrets aws_secrets_manager access_token {\n\t\t\tregion us-east-1\n\t\t\tpath authcrunch/caddy/access_token\n\t\t}\n\n\t\tsecrets aws_secrets_manager users/jsmith {\n\t\t\tregion us-east-1\n\t\t\tpath authcrunch/caddy/users/jsmith\n\t\t}\n\n\t\tlocal identity store localdb {\n\t\t\trealm local\n\t\t\tpath users.json\n\t\t\tuser jsmith {\n\t\t\t\tname \"secrets:users/jsmith:name\"\n\t\t\t\temail \"secrets:users/jsmith:email\"\n\t\t\t\tpassword \"secrets:users/jsmith:password\" overwrite\n\t\t\t\tapi_key \"secrets:users/jsmith:api_key\" overwrite\n\t\t\t\troles authp/admin authp/user\n\t\t\t}\n\t\t}\n\n\t\tauthentication portal myportal {\n\t\t\tcrypto default token lifetime 3600\n\t\t\tcrypto key sign-verify \"secrets:access_token:value\"\n\t\t\tenable identity store localdb\n\t\t}\n\t}\n}\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgreenpau%2Fcaddy-security-secrets-aws-secrets-manager","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgreenpau%2Fcaddy-security-secrets-aws-secrets-manager","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgreenpau%2Fcaddy-security-secrets-aws-secrets-manager/lists"}