Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions cmd/litebastion/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,8 @@ acceptable client/witness key hashes.
path to TLS certificate
-tls-key string
path to TLS private key
-log-level string
minimum severity level to log (default "info")

Since litebastion needs to operate at a lower level than HTTPS on the witness
side, it can't be behind a reverse proxy, and needs to configure its own TLS
Expand Down
7 changes: 6 additions & 1 deletion cmd/litebastion/litebastion.go
Original file line number Diff line number Diff line change
Expand Up @@ -46,15 +46,20 @@ var autocertEmail = flag.String("email", "", "")
var allowedBackendsFile = flag.String("backends", "", "file of accepted key hashes, one per line, reloaded on SIGHUP")
var homeRedirect = flag.String("home-redirect", "", "redirect / to this URL")
var obscurityFlag = flag.Bool("obscurity", false, "enable obscurity mode (disable / and /logz endpoints)")
var logLevel = flag.String("log-level", "info", "log level (debug, info, warn, error)")

type keyHash [sha256.Size]byte

func main() {
flag.Parse()

var level slog.Level
if err := level.UnmarshalText([]byte(*logLevel)); err != nil {
logFatal("unknown log level, must be one of 'debug', 'info', 'warn', or 'error'")
}
console := slogconsole.New(nil)
console.SetFilter(slogconsole.IPAddressFilter)
h := slog.NewTextHandler(os.Stderr, nil)
h := slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{Level: level})
slog.SetDefault(slog.New(slogconsole.MultiHandler(h, console)))

http2.VerboseLogs = true // will go to DEBUG due to SetLogLoggerLevel
Expand Down