redlib (libreddit) (Private front-end for Reddit) on Azure Cloud

Repo to quickly host redlib on Azure Container Instances with Azure Storage Files.

Originally, we hosted libreddit, we have migrated to the forked version: redlib.

Azure Container Instances setup

• update <dnsNameLabel>.<azure region> in Caddyfile.
• run certs.sh to generate client side certificate.
  • alternatively, use cfssl/certs.sh to generate certificates with cfssl
• update AZURE_GROUP_NAME in run.sh and azure-storage-create.sh.
• update LOCATION in azure-storage-create.sh.
• update <azure region> in setup.yaml.
• apply other desired settings in setup.yaml

az login --use-device-code --tenant <yourdiretory.onmicrosoft.com>

# upload Caddyfile to Azure Storage Files
# this script will print `storageAccountName` and `storageAccountKey`
./azure-storage-create.sh

# update `storageAccountName` and `storageAccountKey` in `setup.yaml`

# deploy container instance
./run.sh

Use base64-encoded secrets for Caddyfile and ca.certs

We can also use base64-encode configuration files in the mounted volumes. Simply remove the comments in setup.yaml and replace with the base64 strings.

Check certs with certutil

User certs are stored in ~/.pki/nssdb.

certutil -d sql:$HOME/.pki/nssdb -L

• Arch wiki on Network Security Services