Repository files navigation

Lightweight self-hosted lambda/applications/cgi/serverless-functions engine.

see docs

Features:

• No specific requirements: just one binary. Working "as-is"
• One-click new lambda with public link and handler. Available immediately.
• Rich API
• Security: user switch, IP restrictions, Origin restrictions, tokens ....
• Time limits
• Permanent links (aliases)
• Actions - independent instruction that could be run via UI/API on server
• Scheduler: run actions in cron-tab like style
• Queues and retries
• ... etc -see docs

P.S

There is minimal version of trusted-cgi:nano-run. Check it out - it DevOps friendly with configuration-first approach (ie easier to use for infrastructure-as-a-code).

Since0.3.3 Linux, Darwin and even Windows OS supported: pre-built binaries could be found inreleases

TL;DR;

• for production for debian servers - useapt.reddec.dev (see docs)
• locally or non-debian server -download binary and run
• for quick tests or for limited production - use docker image (docker run --rm -p 3434:3434 reddec/trusted-cgi)

Seeinstallation manual

The process flow is quite straightforward: one light daemon in background listens for requests and launches scripts/appson demand. An executable shall read standard input (stdin) for request data and write a response to standard output (stdout).

Technically any script/application that can parse STDIN and write something to STDOUT should be capable of the execution.

Trusted-cgi designed keeping in mind that input and output data is quite small and contains structured data (json/xml),however, there are no restrictions on the platform itself.

Key differences with classic CGI:

• Only request body is being piped to scripts input (CGI pipes everything, and application has to parse it by itself - it could be very not trivial and slow (it depends))
• Request headers, form fields, and query params are pre-parsed by the platform and can be passed as an environment variable (see mapping)
• Response headers are pre-defined in manifest

Due to changes, it's possible to make the simplest script with JSON input and output like this:

importsysimportjsonrequest=json.load(sys.stdin)# read and parse requestresponse= ['hello','world']# do some logic and make responsejson.dump(response,sys.stdout)# send it to client

Keep in mind, the platform also adds a growing number of new features - see features.

target audience

It's best (but not limited) for

• for hobby projects
• for experiments
• for projects with a low number of requests: webhooks, scheduled processing, etc..
• for a project working on low-end machines: raspberry pi, cheapest VPS, etc..

However, if your projects have overgrown the platform limitations, it should be quite easy to migrate to any other solutions, becausemost low-level details are hidden and could be replaced in a few days (basically - just wrap script to HTTP service)

Also, it is possible to scale the platform performance by just launching the same instances of the platformwith a shared file system (or docker images) with a balancer in front of it.

The platform is quite simple Golang project with Vue + Quasar frontendand should be easy for newcomers. Caveats and tips for backend checkhere

For UI checksub-repo

Any PR (docs, code, styles, features, ...) will be very helpful!

Please note, that Linux (including WSL2) or Darwin is mainly used for developing, therefore most helper scriptsdesigned for those OS.

Requirements:

• go 1.21 (actual version check ingo.mod)
• python3
• pandoc
• docker

Formultiplatform build you may need bintools:

docker run --privileged --rm tonistiigi/binfmt --install all