OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • security/acme-client: API token support for Cloudflare
« previous next »
  • Print
Pages: [1]

Author Topic: security/acme-client: API token support for Cloudflare  (Read 2944 times)

Alphakilo

  • Newbie
  • *
  • Posts: 49
  • Karma: 6
    • View Profile
security/acme-client: API token support for Cloudflare
« on: September 19, 2019, 06:25:13 pm »
acme.sh supports Cloudflares new token model, which allows fine-grained control over token permissions.
Reference: https://github.com/Neilpang/acme.sh/wiki/dnsapi#using-the-new-cloudflare-api-token

I'm a huge fan of the "least-privilege" principle, so I took it upon me to take a stab at implementing it into the os-acme-client Plugin.
Here's the result: https://github.com/Alphakilo/plugins/commit/3a4edf21bcb8cc25df9b7748cee6d88dadf5f98b


It works on my lab and my productive installations, though there are some issues where I'd like some feedback on.

  • Are <help>-elements appropriate in the dialogValidation.xml?
  • I can't get a proper control structure around this, any advice?

Cheers!
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Development and Code Review (Moderator: fabian) »
  • security/acme-client: API token support for Cloudflare
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2