Handcrafted, AI-free blog posts about DevOps, DevSecOps, application security, web development, Azure and similar topics
Configuring a custom domain for an Azure App Service including a App Service Managed Certificate is the kind of task where I constantly have to look up the details. For this reason, and because a colleague asked me to blog about it, I decided to briefly document the process here.
An application’s pentest revealed weak SSL/TLS cipher suites in Azure App Services. To enhance security, non-forward-secrecy cipher suites must be disabled. Utilizing Terraform and the azapi provider, a workaround was implemented to configure the Minimum TLS Cipher Suite, enforcing modern cryptographic standards.
This post discusses restarting an Azure App Service in an Azure DevOps YAML pipeline after applying IaC config to update Azure Key Vault secrets during deployments.
This week, I faced challenges deploying an ASP.NET Core Web API to an Azure App Service using GitHub Actions and OpenID Connect. Initial attempts with azure/webapps-deploy@v3 failed due to missing credentials. A later try with azure/cli@v2 failed because the deployment file wasn't a valid zip. Properly zipping the files led to successful deployment.
This blog post guides the configuration of Serilog for a .NET Core Web API running on an Azure App Service. It covers logging requirements and implementation, including Serilog setup in Program.cs and appsettings.json. It also provides instructions for querying logs in Azure Application Insights and streaming them using Log Stream in Azure App Service.
A colleague at work is currently working on a prototype for Azure OpenAI Services integration. He deployed the prototype application directly from Azure OpenAI Studio to an Azure App Service. When he tried to access the application for the first time, he received the following error message. Authentication Not ConfiguredThis app does not have authentication... Continue Reading →
After my technology switch from Java to C#/.NET about seven years ago, I still tried to stay in touch with Java and spring - at least a little bit. Back in 2015 I therefore started implementing a small spring boot based web application in Java that consumes the REST API of the swiss floorball association... Continue Reading →
Last week, my work colleague Guillem Bonafonte and I came across a suitable use case for WebJobs in context of a project. WebJobs is a feature of Azure App Service that allows to run a program or script on the same instance as a web app, web API, ... After consulting the documentation, we started... Continue Reading →
blog.rufer.be 