JanneMattila / yarp-aad-le

YARP configured with Azure AD authentication and Let's Encrypt certificates

YARP + Azure AD + Let's Encrypt

YARP configured with Azure AD authentication and Let's Encrypt certificates

Build Status

Components combined:

1. YARP
2. Azure AD authentication
3. Let's Encrypt using LettuceEncrypt

Azure AD Authentication

Follow these instructions and set redirect uri to be: https://<youraddress>/signin-oidc and remember to enable ID tokens under authentication.

LettuceEncrypt

Uses DefaultAzureCredential for authentication towards Azure Key Vault.

Important environment variables:

• AZURE_CLIENT_ID
• AZURE_TENANT_ID
• AZURE_CLIENT_SECRET

Working with 'YARP + Azure AD + Let's Encrypt'

How to create image locally

# Build container image
docker build . -t yarp-aad-le:latest

# Run container using command
docker run -p "2001:80" yarp-aad-le:latest

How to deploy to Azure Container Instances (ACI)

Pre-reqs for deployment:

• Ability to create DNS record e.g., app.contoso.com or alternative use ACI provided e.g., <aci>.<location>.azurecontainer.io
  • Access to Azure DNS Zone (or other provider)
• Register Azure AD App to match DNS record
  • Set redirect uri to be: https://<your-domain>/signin-oidc
  • Enable ID tokens under authentication
  • Take note of following variables:
    • AZURE_CLIENT_ID: Application (client) ID of app registration
    • AZURE_TENANT_ID: Directory (tenant) ID of app registration
• After deployment create A record to point to deployed IP Address (if using custom DNS hostname)

Deployment

See step-by-step instructions from deploy.sh.