status-im
/
sshfp-updater
mirror of https://github.com/status-im/sshfp-updater.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity
12 Commits 1 Branch 3 Tags 56 KiB
Go 93%
Makefile 5.1%
Dockerfile 1.9%
Go to file
Jakub Sokołowski 4e2e5f6365
readme: update formatting, add infor about release 
Signed-off-by: Jakub Sokołowski <jakub@status.im>
 		2022-08-02 16:01:09 +02:00
cloudflare rename infra-sshfp-cf to sshfp-updater 2022-08-02 15:23:28 +02:00
cmd/sshfp-updater move main.go to cmd/sshfp-updater 2022-08-02 15:50:08 +02:00
config sshfp: added support for calling consul binary directly 2022-07-29 17:08:08 +02:00
consul sshfp: added support for calling consul binary directly 2022-07-29 17:08:08 +02:00
sshfp sshfp-generator: initial commit. 2022-06-24 02:47:20 +02:00
statestore Added configurable storage file + some cosmetic changes 2022-07-27 13:36:51 +02:00
.dockerignore Added Dockerfile and .dockerignore 2022-07-15 18:52:40 +02:00
.gitignore add Makefile for building releases 2022-08-02 15:55:08 +02:00
Dockerfile rename infra-sshfp-cf to sshfp-updater 2022-08-02 15:23:28 +02:00
Makefile add Makefile for building releases 2022-08-02 15:55:08 +02:00
README.md readme: update formatting, add infor about release 2022-08-02 16:01:09 +02:00
VERSION bump version to 1.0.2 2022-08-02 15:55:09 +02:00
go.mod rename infra-sshfp-cf to sshfp-updater 2022-08-02 15:23:28 +02:00
go.sum sshfp: added support for calling consul binary directly 2022-07-29 17:08:08 +02:00

README.md

Description

SSHFP Tool is a tool created in Golang to glue Consul DB and Cloudflare.

Main purpose is creating SSHFP records to get rid of "host key verification failed".

Building

make

Or to build for all platforms

make release

Usage

Supported env variables:

  • DOMAIN_NAME - Domain name which will be working on.
  • CF_TOKEN - CloudFlare Token with write access to above domain.
  • HOST_LIVENESS_TIMEOUT - After this number of seconds of host being offline DNS records are removed.

It's possible to create JSON formatted config file (example in testcfg)

As it has been designed to work with consul watches passing proper JSON file to stdin is required.

cat watches.dump | ./sshfp-updater

Current state

  • CloudFlare integration is fully implemented
  • SSHFP Record creation based on tag in Consul form.
  • Implemented Consul watches integration
  • Implemented logic to manipulate states (merging config, etc)

TODO

  • A few major changes