feat: add webdav-proxy just task for SSH-forwarded WebDAV mount#29
Open
utiberious wants to merge 1 commit intoutensil:mainfrom
Open
feat: add webdav-proxy just task for SSH-forwarded WebDAV mount#29utiberious wants to merge 1 commit intoutensil:mainfrom
utiberious wants to merge 1 commit intoutensil:mainfrom
Conversation
utiberious
changed the title
utiberious
force-pushed
the
feat/webdav-tunnel
branch
from
a46cf97 to
4ffc69c
Compare
Adds a generic webdav-proxy task to the justfile (Backup section, near prep-kopia) that forwards any remote WebDAV server to localhost via SSH. Useful for services that bind their WebDAV endpoint to 127.0.0.1 only (e.g. kopia mount --webdav). The SSH forward makes it accessible locally without exposing it on any network interface. Features: - start/stop/status lifecycle with PID file - SSH port forwarding with ControlPath=none (same pattern as pod-proxy) - ServerAliveInterval for keepalive - Binds local side to 127.0.0.1 only (not exposed to LAN) - Configurable local and remote ports Usage: just webdav-proxy start user@host 55206 Finder ⌘K → http://localhost:9876 [AGENT]
utiberious
force-pushed
the
feat/webdav-tunnel
branch
from
4ffc69c to
c06f31f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a generic
webdav-tunneltask todotfiles/term.justthat tunnels any remote WebDAV server to localhost via SSH.Why
Some services bind their WebDAV server to
127.0.0.1only (e.g.kopia mount --webdav). When the service runs in a VM or remote host, you need a way to access it from the host — but exposing it on a network interface (via socat, reverse proxy, etc.) adds attack surface.An SSH tunnel is the cleanest solution: encrypted, authenticated, no extra software, binds local side to loopback only.
Design
Same pattern as
pod-proxy:-o ControlMaster=no -o ControlPath=none(bypass SSH mux)ServerAliveInterval=30for keepalivestart/stop/status)127.0.0.1onlyUsage
Files