Skip to content

Instantly share code, notes, and snippets.

@jpluscplusm
jpluscplusm / README.md
Last active Feb 22, 2020
A primitive Double A (AAA-minus-Accounting) RBAC system implemented in declarative Nginx config
View README.md

Nginx Double A

A primitive Double A (AAA-minus-Accounting) RBAC system implemented in declarative Nginx config.

Background

So I noticed https://github.com/alexaandru/elastic_guardian, a simple AAA reverse-proxy to sit in front of Elasticsearch. Reading the source and comments tickled my "why is this in code not config?" funnybone.

I asked @alexaandru (https://twitter.com/jpluscplusm/status/438339557906735104) who told me it was mostly the resulting complexity of the nginx config he tried that prompted him to write it.