cmd/litebastion: add --log-level flag

Author: Sockerfri

cmd/litebastion/README.md

@@ -22,6 +22,8 @@ acceptable client/witness key hashes.
             email address to register the ACME account with
     -host string
             host to obtain ACME certificate for
+    -log-level string
+            minimum severity level to log (default "info")
 
 If you intend to protect backends from unwanted traffic and not forward
 arbitrary requests from the internet, you can accept request on localhost.

cmd/litebastion/litebastion.go

@@ -43,15 +43,21 @@ var autocertHost = flag.String("host", "", "host to obtain ACME certificate for"
 var autocertEmail = flag.String("email", "", "")
 var allowedBackendsFile = flag.String("backends", "", "file of accepted key hashes, one per line, reloaded on SIGHUP")
 var homeRedirect = flag.String("home-redirect", "", "redirect / to this URL")
+var logLevel = flag.String("log-level", "info", "log level (debug, info, warn, error)")
 
 type keyHash [sha256.Size]byte
 
 func main() {
 	flag.Parse()
 
+	var level slog.Level
+	if err := level.UnmarshalText([]byte(*logLevel)); err != nil {
+		slog.Error("unknown log level, must be one of 'debug', 'info', 'warn', or 'error'")
+		os.Exit(1)
+	}
 	console := slogconsole.New(nil)
 	console.SetFilter(slogconsole.IPAddressFilter)
-	h := slog.NewTextHandler(os.Stderr, nil)
+	h := slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{Level: level})
 	slog.SetDefault(slog.New(slogconsole.MultiHandler(h, console)))
 
 	http2.VerboseLogs = true // will go to DEBUG due to SetLogLoggerLevel