GitHub Copilot Customization Explained for Beginners: Instructions, Prompt Files, Skills, Agents, and Hooks Introduction If you've recently started using GitHub Copilot, you've probably come across terms like Instructions , Prompt Files , Skills , Agents , and Hooks . At first glance, they all seem to do the same thing—they tell Copilot what to do. So why does GitHub have five different customization features? The answer is simple: each feature solves a different problem. Think of GitHub Copilot as a new developer joining your team. On their first day, you don't just hand them code. You explain your coding standards, give them reusable templates, teach them specialized knowledge, assign them a role, and automate repetitive tasks. That's exactly how GitHub Copilot customization works. In this article, you'll learn what each feature does, when to use it, and how they all work together. By the end, you'll know which feature to start with and which ones can wait un...
Configuring free HTTPS(TLS/SSL) certificates on Azure App Service
In November 2019 Microsoft announced at Ignite 2019, we can now enable HTTPS for our own domains for free on Azure App Service (preview).
Azure App Service is an HTTP-based service for hosting web applications, REST APIs, mobile back ends, Docker images.
TLS/SSL is a mandatory NFR checklist when going to production. Using a third-party certificate usually has the downside of managing certificate, rotation, renewal process etc. You can also buy App Service Certificates from Azure, which have more features than the free offering, but do cost money ($$$). Of course, we have things like Let's Encrypt which is free but it comes with overhead of certificate management, rotation, integration with Azure etc. So, having a managed certificate is certainly a nice feature.
2. Custom Domain already exists
Azure App Service is an HTTP-based service for hosting web applications, REST APIs, mobile back ends, Docker images.
TLS/SSL is a mandatory NFR checklist when going to production. Using a third-party certificate usually has the downside of managing certificate, rotation, renewal process etc. You can also buy App Service Certificates from Azure, which have more features than the free offering, but do cost money ($$$). Of course, we have things like Let's Encrypt which is free but it comes with overhead of certificate management, rotation, integration with Azure etc. So, having a managed certificate is certainly a nice feature.
Pre-requisites
1. WebApp provisioned in Azure portal with App Service Plan of Basic and above (free and shared tiers are not supported)2. Custom Domain already exists
Enabling a free SSL certificate for the web app
- Custom Domain configurations
- Turn on "HTTPS Only" option
- Click on "Add Custom Domain" where you will be providing custom domain information and submit the details
- Add SSL Binding as shown below if you are seeing SSL state as not secure for assigned custom domain name. After updating the binding it show SSL state as secure.
- TLS/SSL configurations
- Now if we navigate back to overview tab of App Service, we should be seeing the updated Url which comprises of custom domain which we added in above step.
- Now its done, time to verify the changes.
Some of the missing features of this new offering. The capability is in preview, so some of these limitations may be removed when its GA.
- No support for wildcards
- Naked domain support to App Service Managed Certificates
- Cannot specify a Subject Alternate Name (SAN) for the certificate
- No support for apex domains
- Cannot export the certificate
- Can only enable if the custom domain is already added with an A / CNAME record.
References
Popular posts from this blog
Tidy up - Unused Project and Nuget package reference using Visual Studio 2019
If you are a Developer/Architect using Visual Studio as IDE for your development activities, this blog post will be of your interest. During the Ignite 2021 conference, Microsoft released Visual Studio 2019 v16.9 and v16.10 Preview 1. As part of version 16.10 Preview 1, one of the cool features they introduced is to "Remove Unused References..." for any Projects and Nuget packages that are not in use. At the time of writing this blog post, we have Visual Studio Version 16.10.0 (official release) which includes this new feature. As part of development, we generally get carried away and introduce new Nuget package references to your project and add new references to your Projects. By the end of development, you will not be 100% sure which are not being referenced and unused which means you will leave those unused project references in your application. Now you might be wondering what's the big deal in it since it doesn't harm. The advantage of removing unused project r...
Azure Front Door vs Azure Traffic Manager?
In my previous blog post, we looked in detail Azure Front Door (AFD) . In this blog post, let's compare Azure Front Door (AFD) with another popular Azure service named Azure Traffic Manager (ATM). Prior to AFD most of the applications made use of ATM in their architecture now with AFD being available it's good to understand in which scenarios these individual services are ideal. Azure Front Door (AFD) Azure Front Door Service (AFD) a scalable and secure entry point for the fast delivery of your global applications. Azure Front Door allows you to transform your global (multi-region) applications into robust, high-performance applications, APIs, and content. Azure Traffic Manager (ATM) Azure Traffic Manager is a DNS-based traffic load balancer for geographically distributed Datacenters. Traffic Manager uses DNS to direct traffic to endpoint based on the traffic routing method and health of the endpoints. Similarities between AFD and ATM Both Azure Services support Multi-...
Authenticate Azure Functions - API Keys
In this blog post, we will see one of the ways to secure your Azure Functions using API keys. Security plays a key role as part of SDLC (Software Development Life Cycle) doesn't matter whether it's exposed to the client/public or even if it's internal. There are multiple ways to secure your Azure Functions like API Keys, Certificate, API Mgmt, App Service Authentication, etc. If you are new to the Cloud and Azure Functions but want to make a start with minimal effort and less setup of Infrastructure, then API Keys is the ideal choice. Azure Functions allows you to secure HTTP-triggered functions by API access key in the request. As part of creating new Azure Functions, we can select the Authorization Level enum value. If we set the Authorisation level to Anonymous, no security applied which means no authentication applied for the endpoint. Authorization Level - Function By setting the Authorisation level to Function each Azure Functions require a specific API key to Au...
Comments
Post a Comment