vinnie357 / njs

njs for use with nginx+

njs

njs for use with nginx+

https://nginx.org/en/docs/njs/reference.html

setup

copy your nginx-repo.crt and nginx-repo.key to nginx-plus/licenses/

## access from local vault

## access secret from  google secretsmanager
secretName="my-nginx-secrets"
secrets=$(gcloud secrets versions access latest --secret="${secretName}")
## cert
cat << EOF > nginx-plus/licenses/nginx-repo.crt
$(echo $secrets | jq -r .cert)
EOF
## key
cat << EOF > nginx-plus/licenses/nginx-repo.key
$(echo $secrets | jq -r .key)
EOF

create a default server cert

echo "====self signed cert===="
cd nginx-plus/nginx/conf.d/certs
openssl genrsa -des3 -passout pass:1234 -out server.pass.key 2048
openssl rsa -passin pass:1234 -in server.pass.key -out server.key
rm server.pass.key
openssl req -new -key server.key -out server.csr -subj "/C=US/ST=testville/L=testerton/O=Test testing/OU=Test Department/CN=test.example.com"
openssl x509 -req -sha256 -days 365 -in server.csr -signkey server.key -out server.crt

set function name in docker-compose.yml

http://nginx.org/en/docs/http/ngx_http_js_module.html#js_include

NJS = the name of your function in main.js

the names by default are derived from the filename of your .js included and the name of your exported function.

test.js

export default { njs }
function njs(r) {
  r.return(200, "The njs module was loaded\n");
}

test.njs

environment:
  - NJS=test.njs

running

optional

# setup
. init.sh && setup
# test
. init.sh && test

manual

docker-compose up

re-running

# rerun the templates with envsubstr
docker-compose build
# start again
docker-compose up

test

# test module loaded
curl http://localhost/test
# test your function
curl -v https://localhost/njs

dev

#manual test pre-commit
pre-commit run -a -v