https://github.com/cofob/authorize_me

Authorize me - dead simple ssh authorization synchronization written in Bash
https://github.com/cofob/authorize_me

Last synced: about 22 hours ago
JSON representation

Authorize me - dead simple ssh authorization synchronization written in Bash

• Host: GitHub
• URL: https://github.com/cofob/authorize_me
• Owner: cofob
• License: gpl-3.0
• Created: 2024-07-09T15:36:16.000Z (4 months ago)
• Default Branch: master
• Last Pushed: 2024-07-10T16:32:03.000Z (4 months ago)
• Last Synced: 2024-10-12T00:25:48.017Z (27 days ago)
• Language: Nix
• Size: 30.3 KB
• Stars: 3
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# authorize_me

Authorize me - dead simple ssh authorization synchronization written in Bash ([Amber-lang](https://amber-lang.com/), actually, but it's compilled to Bash).

## What is this?

This is simple program that integrates into sshd `AuthorizedKeysCommand` functionality. It does one simple thing - returns public ssh keys for given username. sshd automatically execute this program and consume ssh keys, if keys matching - login approved.

To increase stability it also caches remote keys to local file and reads it, if server is unavailable.

Also repository contains very simple http server that server JSON files from `HOSTS_DIR` folder based on request IP. If request coming from 1.2.3.4 src IP it will respond with content of `1.2.3.4.json` file.

## Configuration

Program has following environment variables:

- `SERVER_URL` **(required, client-only)** - URL from where to fetch data. Example: `https://kmi.aeza.net/hFRDkMAoOl`.

- `USERS_PATH` **(client-only)** - Default filesystem path where data from remote will be stored. Defaults to `/var/authorize_me/users.json`.

- `HOST` **(server-only)** - Listen address. Defaults to `127.0.0.1`.

- `PORT` **(server-only)** - Listen port. Defaults to `8080`.

- `HOSTS_DIR` **(server-only)** - Directory where user keys are stored. Defaults to `/var/authorize_me`.

- `LOG_LEVEL` - Logging level. Allowed values: `DEBUG`, `INFO`, `WARN`, `ERROR`. Defaults to `INFO`.

- `LOG_PATH` - Path to where logs will be written. Defaults to `/dev/stderr`.

Also `.env` files are readed automatically.

## Requirements

- `socat` **(for server)**

- `jq` **(for client)**

- `busybox` **(for server and client)**