DEV Community: Hemanth Krishna

Liguard - The Linode Guard

Hemanth Krishna — Mon, 20 Feb 2023 20:11:55 +0000

What I built

Imagine you wanted to block people using iPhone to access your server, or people using Chrome or people accessing from IPs of specific location to your server, but you don't want to write all this on serverside. You can do that all on edge (before request hits your server) with Liguard!

Liguard is an Edge cloud firewall reverse proxy with an inbuilt ddos prevention solution. Does that sound complex? Let's break it down.

Cloud: A system/server that is sitting on the cloud
Firewall: A system that denies/allows a packet based on some instruction and conditional logic
Reverse Proxy: A system that sits in-front of your actual server and forward the request to your actual server safely
DDoS Protection: A system that detects DDoS and contains the attack Liguard is a combination of all these! Yes, you read that right.

Category Submission:

EdgeWorker Experts

Screenshots

Description

One can simply define custom security policies in JSON like the following:

{
  "siteConfigs": [
    {
      "siteData": {
        "siteName": "google",
        "forwardingUrl": "https://google.com",
        "blockedOs": ["iPhone"],
        "blockedBrowser": ["Chrome"],
        "blockedDevice": ["iPhone"],
        "blockedOSVersion": ["15.1"],
        "blockedLocations": [""],
        "blockedIPs": ["0.0.0.0", "8.8.8.8"]
      }
    },
    {
      "siteData": {
        "siteName": "github",
        "forwardingUrl": "https://github.com",
        "blockedOs": ["Mac"],
        "blockedBrowser": ["Chrome"],
        "blockedDevice": ["iPhone"],
        "blockedOSVersion": ["15.1"],
        "blockedLocations": ["India"],
        "blockedIPs": ["0.0.0.0", "8.8.8.8"]
      }
    }
  ]
}

This will implement all these security policies in the Edge using Linode's EdgeWorker service! A truly customisable and configurable firewall guard.

Source Code

DarthBenro008 / liguard

A very simple customizable and configurable firewall deployable on Linode Edgeworker

Liguard

A very simple customizable and configurable firewall deployable on Linode Edgeworker

🤔 What is Liguard?

Liguard is an Edge cloud firewall reverse proxy with an inbuilt ddos prevention solution. Does that sound complex? Let's break it down.

Cloud: A system/server that is sitting on the cloud
Firewall: A system that denies/allows a packet based on some instruction and conditional logic
Reverse Proxy: A system that sits in-front of your actual server and forward the request to your actual server safely
DDoS Protection: A system that detects DDoS and contains the attack

Liguard is a combination of all these! Yes, you read that right.

Imagine you wanted to block people using iPhone to access your server, or people using Chrome or accessing from IPs of specific location. You can do that all with Liguard!

What are the major advantages of using Liguard?

Declarative security policies using JSON
Runs on Edge…

View on GitHub

Permissive License

This project is backed under MIT License, special shout out to project UA-Parser, as liguard uses a piece of its source-code.

Background

As a backend developer, i always was very concerned about security issues. Adding security features on server levels are always hectic, i always wondered if i could somehow block people who use safari to visit my website (because a lot of CSS frameworks break in safari), hence this motivated me to make a firewall/guard that could be applied in a whole domain, and is not at server level, but at edge-level.

How I built it

Thanks to Linode's Edgeworker service and their amazing tutorials!

This project is written in Javascript, and deployed via akamai CLI

The resources and relevant info on how to develop/test and deploy can be found here!

Action Paniker - Stimulate your senses physically when your build fails 🚨

Hemanth Krishna — Tue, 07 Dec 2021 21:22:10 +0000

Action Paniker in Action

Motivation

Sometimes in OpenSource Projects that are huge, the deployment takes a lot of time, and we do not bother to keep waiting for that much amount of time to ensure that the build/release of our project has been successfully deployed.

Some OpenSource projects are critical, that is, the builds and release are very crucial and makes a great impact, if something goes wrong in these CI, the maintainer must be notified immediately.

Hence Action Paniker, it sits nicely on your desk, and it will light up and make alarm sounds stimulating your physical senses if your release or build fails, physically asking you to "Something went wrong! Please look into it ASAP!". Its the much wanted CODE-RED Bell that any maintainer team would want.

Flow of the Workflow

The flow of the workflow is simple:

GitHub action runs
If any step fails, the GitHub Action sends a CURL to the paniker at your desk and its going to light up and buzz simulating your physical senses and indicating your build/release has failed when you are away from your desk.
The steps are well defined in the Repository Readme, you need an RaspberryPi, LED and Buzzer and some cardboard as hardware components and ofc some patience!

The circuit diagram of how the Hardware is setup

An enclosed box of all the components

I am aware it doesn't look appealing, and its done intentionally, so that I can pray that my build/release never fails :P

Submission Category:

Interesting IoT

Yaml File

I have added 4 different YAML's to choose from:

Android Release
Rust Release across Linux, Windows and MacOS
Golang Release across Linux, Windows and MacOS
Publishing Hugo website on GitHub Pages

But it's not limited to these 4 workflows, you can essentially integrate this with anything that follows the following in any workflow file:

every step has an id
continue-on-error is set to true for every step
the Send Paniker step is inclusive of all step outcomes in the if condition

   - name: Send Paniker
      if: steps.stepID.outcome != 'success' # Replace Step ID with your stepid 
      run: curl http://YOUR_IP:3000/panik

Source Code

DarthBenro008 / gh-release-paniker

A simple GitHub Action that physically puts your senses on alert when your build/release fails

GH Release Paniker

A simple GitHub Action that physically puts your senses on alert when your build/release fails

Usage

Requirements:

Raspberry Pi, LED, Buzzer, Internet connection, Router with port-forwarding capabilities and some patience :D

Step 1: Assembling the Circuit

Assemble the Circuit as given in the diagram
Step 2: Installing the FastAPI Server Clone the repo using the comment git clone https://github.com/DarthBenro008/gh-release-paniker in your Raspberry Pi

Run the following commands:
```
cd server
pip install -r requirements.txt
unvicorn main:app --host=0.0.0.0 --port=3000
```
Step 3: Port forward and get the IP Address of your Raspberry Pi

Go to your Router settings and port forward the IP address of your Raspbery Pi on port 3000

Warning: Port forwarding exposes your raspberry pi to the internet, ensure you do not have any sensitive data or server running on it
Step 4: Pick a GitHub Action workflow from this repository

From the .github/workflows folder, you have…

View on GitHub

Additional Resources / Info

Some of my personal open source projects that are using this workflow are:

Enigma 7.0 - An Online Cryptic Hunt

Hemanth Krishna — Sat, 05 Dec 2020 17:11:50 +0000

Enigma 7.0

It's an Online Cryptic Hunt that my friends at IEEE-VIT and I had developed. We curated and created a bunch of questions and put it as a challenge to the open vast world of internet in the hopes that one could solve it. We conduct this cryptic hunt every year and till date its a record that no one has been able to solve it!

If you are ready for a challenge head over to Enigma 7.0 and try your best to crack it!

Put your thinking caps on and give those brain cells some good exercise!

Shoutout

Shoutout to IEEE-VIT for creating this epic game, had fun developing this, do let me know your thoughts about the game in the comment section, meanwhile you can also follow IEEE-VIT on Twitter.

// Detect dark theme var iframe = document.getElementById('tweet-1334812253460152320-902'); if (document.body.className.includes('dark-theme')) { iframe.src = "https://platform.twitter.com/embed/Tweet.html?id=1334812253460152320&theme=dark" }

Sneak Peak

Here is how it looks!

P2: AppBrickie - Github Action to deliver your app PRs and Builds on Telegram automatically!

Hemanth Krishna — Thu, 17 Sep 2020 19:11:01 +0000

My Workflow

AppBrickie - A GitHub Action that will test, sign and deliver your android apk build right to you on your Telegram with just a push of commit!

Being an android app developer, I found it a very tedious chore to build my app, transfer the apk to my phone and then manually share and upload the file for my team to check it out.
Lets be honest, Gradle builds are slow and time taking process and when you are an open source enthusiast, reviewing PRs to confirm changes and to ensure there aren't any runtime errors you are bound to build every PR and check before merging it to your main branch.

To tackle this issue I leveraged the power of Docker, Telegram and GitHub Action to make my life easier, whenever I push a commit to my main branch or whenever there is a PR against my main branch, I automatically receive a tested, signed, built apk right onto my phone which is installable on One-Tap! Convenient, isn't it?

No More Patches of PRs and to compile the PR manually
No more wires, no more build history management!
Get your builds right into your phone and install them in One-Tap!
Supports both Flutter and Native Android Builds (Java/Kotlin)

Submission Category:

Phone Friendly : This Github Action can significantly boost development of Java, Kotlin and, Flutter apps as it helps in automatic testing , building and signing and publishing your app to masses or even to your beta testers in an instant!

Upcoming Features:

Slack integration/support, cause why not?

Link to Code

DarthBenro008 / app-brickie

A GitHub Action to automatically build your android apps with ease!

AppBrickie - Your Friendly App Builder Action.

Automate your android builds and get your APK delivered to you on Telegram Groups, Chat, Channels, any of them!

What can you do with AppBrickie?

Get your APK delivered to you on telegram with just a push of commit!
Automated Android APK Builds.
Unit Tests on Android Builds.
Supports Firebase based apps and signed builds with your custom key!
Forget wires, patches and building pull requests manually!
Slack support coming soon! (star and watch the project to stay updated !)

Installation

Step 1: Add the following yaml file as build.yml in .github/workflows folder of your app repository.

Note: If your project uses any services of firebase, please refer to the WIKI for instructions. The below instructions are only for vanilla builds.

For Native Android Builds (Java/Kotlin) :

name: CI
on
  push
    branches: [master]
  pull_request
    branches: [master]

jobs

…

View on GitHub

Use Cases:

You can add the @AppBrickieBot to telegram channel and groups and publish apk builds instantly to masses!
You can create a channel for beta testing the master branch and deliver the build instantly to your beta testers
You can set this action up to share the build immediately with all your team members
You can create a channel and use this action to get the build of PRs delivered so that you can just install the app in one tap and verify the changes with no hassle anywhere anytime !
Helpful for maintainers and app developers to automatically run unit test and build their app and get it delivered right to their phone.

Additional Resources / Info

API and Telegram Bot Handler - I made a Custom API and Telegram Bot for AppBrickie to generate Unique IDs and send the files. leveraging the power of Docker and GoLang which is fast and less resource intensive, perfect for such tasks!
For More Info you can refer the AppBrickie Wiki

One of the Open Source Projects by IEEE-VIT is using this Action in their open source app named Gakko, which helps education easier in the pandemic situation

Happy developing! hope this action boosts your productivity to make wonderful apps! :D

P1: AppBrickie - Smart Github Action that delivers your app builds on Telegram!

Hemanth Krishna — Mon, 31 Aug 2020 18:30:25 +0000

Update : There is an updated part 2 of this article that explains everything in a better way with new features!

P2: AppBrickie - Github Action to deliver your app PRs and Builds on Telegram automatically!

Hemanth Krishna ・ Sep 17 ・ 3 min read

#actionshackathon #android #docker #showdev

My Workflow

AppBrickie - A smart GitHub Action that will deliver your android apk build right to you on your Telegram !

To tackle this issue I leveraged the power of Docker, Telegram and GitHub Action to make my life easier, whenever I push a commit to my main branch or whenever there is a PR against my main branch, I automatically receive a built apk right onto my phone which is installable on One-Tap! Convenient, isn't it?

No More Patches of PRs and to compile the PR manually
No more wires, no more build history management!
Get your builds right into your phone and install them in One-Tap!
Supports both Flutter and Native Android Builds (Java/Kotlin)

Use Cases:

You can add the @AppBrickieBot to telegram channel and groups and publish apk builds instantly to masses!
You can create a channel for beta testing the master branch and deliver the build instantly to your beta testers
You can set this action up to share the build immediately with all your team members
You can create a channel and use this action to get the build of PRs delivered so that you can just install the app in one tap and verify the changes with no hassle anywhere anytime !
Helpful for maintainers and app developers to automatically run unit test and build their app and get it delivered right to their phone.

Steps to Use :

Checkout the AppBrickie Repository to learn in detail about the action and get started in 3-4 simple steps!

Step 1: Go To @AppBrickieBot on Telegram and generate your UniqueId
Step 2: Go to AppBrickie Repository and just copy the yaml file under .github/workflows folder of your repository
Step 3: Fill in your UniqueId that you got from the Telegram Bot , set other settings in the YAML file you just copied (detailed instructions given in repository)
Step 4: Sit back and Enjoy :D , get your build delivered right to you on your phone and install in OneTap and enjoy!

Support

Supports Native (Java/Kotlin) and flutter builds too! all under one action , checkout the repository to learn more about usage of AppBrickie

Upcoming Plans

Custom Key App Signing
Fully supporting firebase based apps build
To push built app to repository

(Star and watch the repository to stay updated ! )

Submission Category:

Phone Friendly

Link to Code

DarthBenro008 / app-brickie

A GitHub Action to automatically build your android apps with ease!

AppBrickie - Your Friendly App Builder Action.

Automate your android builds and get your APK delivered to you on Telegram Groups, Chat, Channels, any of them!

What can you do with AppBrickie?

Get your APK delivered to you on telegram with just a push of commit!
Automated Android APK Builds.
Unit Tests on Android Builds.
Supports Firebase based apps and signed builds with your custom key!
Forget wires, patches and building pull requests manually!
Slack support coming soon! (star and watch the project to stay updated !)

Installation

Step 1: Add the following yaml file as build.yml in .github/workflows folder of your app repository.

Note: If your project uses any services of firebase, please refer to the WIKI for instructions. The below instructions are only for vanilla builds.

For Native Android Builds (Java/Kotlin) :

name: CI
on
  push
    branches: [master]
  pull_request
    branches: [master]

jobs

…

View on GitHub

Additional Resources / Info

API and Telegram Bot Handler - I made a Custom API and Telegram BOT for AppBrickie to generate Unique IDs and send the files right to you leveraging the power of Docker and GoLang which is fast and less resource intensive , perfect for such tasks!
For More Info you can refer the AppBrickie Wiki