/v1/device/host-config doesn't allow setting of redsocks "log_debug"

[rcooke-warwick]

Right now the /v1/device/host-config endpoint is limited to inly modifying a subset of the redocks configuration fields:

balena-supervisor/src/host-config.ts

Line 35 in 963f43c

const proxyFields = ['type', 'ip', 'port', 'login', 'password'];

A static base header is always used - with "log_debug = off". The only way to modify this property to enable extra logging is to change the redocks.conf file directly. The issue with this is that further PATCH requests to /v1/device/host-config will overwrite this change with the header here again:

balena-supervisor/src/host-config.ts

Line 20 in 963f43c

base {

From my understanding we are deliberately limiting what redsocks configuration options can be modified via this endpoint to try to prevent mistakes being made, which could lead to unreachable devices - for example "local_port = 12345 is set, so that the iptables rules and redsocks port match." - however "log_debug = on" is a safe one to allow - so maybe its worth enabling that?

[pipex]

Very late response @rcooke-warwick. Is not only about safety but also about being independent from the actual proxy implementation. Something like debug would probably be safe to add, as some verbose mode would be expected in most type of proxy service, we would just have to define the naming.