sitegate-lambda

Overview ¶

Command sitegate-lambda is the stock static-site login gate as a Function-URL Lambda: auth/sitegate configured from a toml file bundled into the deploy zip next to the bootstrap binary, so an adopting deployment writes no Go -- it cross-compiles this command at a released version and ships a config file.

The sitegate table of SITEGATE_CONFIG (default ./sitegate.toml) carries the non-secret sitegate.Config fields under kebab-case keys (client-id, site-domain, ...). The CloudFront signer key stays out of the file and arrives as SITEGATE_PRIVATE_KEY_PEM, raw PEM or base64-of-PEM.