mirror of
https://github.com/ergosteur/ergo-proxmox-scripts.git
synced 2026-10-28 13:00:37 -04:00
ergosteurandClaude Opus 5
d44e4582d3
stop-pa-vm.service calls the PAN-OS XML API on host shutdown so the firewall VM goes down cleanly rather than being killed. The API key is read from conf/pa-vm.conf, resolved relative to the script. See conf/pa-vm.conf.example. Pass the request through curl --config on stdin with the key in an X-PAN-KEY header, instead of embedding it in the URL. A key in the query string is visible in ps and would be recorded in any proxy or webserver log along the path. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
18 lines
638 B
Plaintext
18 lines
638 B
Plaintext
# Credentials for pa-vm_api_stop.sh (PAN-OS XML API shutdown).
|
|
#
|
|
# Copy to conf/pa-vm.conf next to the scripts and lock it down:
|
|
# cp conf/pa-vm.conf.example conf/pa-vm.conf
|
|
# chmod 0600 conf/pa-vm.conf
|
|
#
|
|
# The script looks for it relative to its own location, so this works both in a
|
|
# checkout and deployed at /opt/ergosteur. Override with PA_VM_CONFIG.
|
|
#
|
|
# Generate a key with:
|
|
# curl -k -X POST 'https://<host>/api/?type=keygen' \
|
|
# --data-urlencode 'user=<user>' --data-urlencode 'password=<password>'
|
|
|
|
PA_VM_HOST=pa-vm
|
|
|
|
# Passed as an X-PAN-KEY header via curl --config, so it stays out of argv.
|
|
PA_VM_API_KEY=changeme
|