rename flag, add comment, add logging

cmd/nanomdm/main.go

@@ -65,7 +65,7 @@ func main() {
  flMigration = flag.Bool("migration", false, "HTTP endpoint for enrollment migrations")
  flRetro = flag.Bool("retro", false, "Allow retroactive certificate-authorization association")
  flDMURLPfx = flag.String("dm", "", "URL to send Declarative Management requests to")
- flAuthProxy = flag.String("auth-proxy", "", "Reverse proxy URL target for MDM-authenticated HTTP requests")
+ flAuthProxy = flag.String("auth-proxy-url", "", "Reverse proxy URL target for MDM-authenticated HTTP requests")
  )
  flag.Parse()
 
@@ -119,7 +119,6 @@ func main() {
  mux := http.NewServeMux()
 
  if !*flDisableMDM {
-
  var mdmService service.CheckinAndCommandService = nano
  if *flWebhook != "" {
  webhookService := microwebhook.New(*flWebhook, mdmStorage)
@@ -134,6 +133,7 @@ func main() {
  mdmService = dump.New(mdmService, os.Stdout)
  }
 
+ // helper for authorizing MDM clients requests
  certAuthMiddleware := func(h http.Handler) http.Handler {
  h = httpmdm.CertVerifyMiddleware(h, verifier, logger.With("handler", "cert-verify"))
  if *flCertHeader != "" {
@@ -170,6 +170,7 @@ func main() {
  if err != nil {
  stdlog.Fatal(err)
  }
+ logger.Debug("msg", "authproxy setup", "url", *flAuthProxy)
  authProxyHandler = http.StripPrefix(endpointAuthProxy, authProxyHandler)
  authProxyHandler = httpmdm.CertWithEnrollmentIDMiddleware(authProxyHandler, certauth.HashCert, mdmStorage, true, logger.With("handler", "with-enrollment-id"))
  authProxyHandler = certAuthMiddleware(authProxyHandler)