1a6db25b7a
https://github.com/tailscale/tailscale/tree/main/cmd/nginx-auth is a utility in the tailscale repo allowing users to delegate nginx request authorization to a tailscale daemon running on the same host.
43 lines
1.3 KiB
Nix
43 lines
1.3 KiB
Nix
{ lib, stdenv, buildGoModule, fetchFromGitHub }:
|
|
|
|
let
|
|
version = "1.48.2";
|
|
in
|
|
buildGoModule {
|
|
pname = "tailscale-nginx-auth";
|
|
inherit version;
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "tailscale";
|
|
repo = "tailscale";
|
|
rev = "v${version}";
|
|
hash = "sha256-5Usi7W4y6JniyxBIfQid1XjDIZRS5oIw+KUMMiFRBwk=";
|
|
};
|
|
vendorHash = "sha256-Fr4VZcKrXnT1PZuEG110KBefjcZzRsQRBSvByELKAy4=";
|
|
|
|
CGO_ENABLED = 0;
|
|
|
|
subPackages = [ "cmd/nginx-auth" ];
|
|
|
|
ldflags = [
|
|
"-w"
|
|
"-s"
|
|
"-X tailscale.com/version.longStamp=${version}"
|
|
"-X tailscale.com/version.shortStamp=${version}"
|
|
];
|
|
|
|
postInstall = lib.optionalString stdenv.isLinux ''
|
|
mv $out/bin/nginx-auth $out/bin/tailscale.nginx-auth
|
|
sed -i -e "s#/usr/sbin#$out/bin#" ./cmd/nginx-auth/tailscale.nginx-auth.service
|
|
install -D -m0444 -t $out/lib/systemd/system ./cmd/nginx-auth/tailscale.nginx-auth.service
|
|
install -D -m0444 -t $out/lib/systemd/system ./cmd/nginx-auth/tailscale.nginx-auth.socket
|
|
'';
|
|
|
|
meta = with lib; {
|
|
homepage = "https://tailscale.com";
|
|
description = "Tool that allows users to use Tailscale Whois authentication with NGINX as a reverse proxy.";
|
|
license = licenses.bsd3;
|
|
mainProgram = "tailscale.nginx-auth";
|
|
maintainers = with maintainers; [ danderson phaer ];
|
|
};
|
|
}
|