From c1f6dce227ee2ba7d12881ad0f97787cf5deff6a Mon Sep 17 00:00:00 2001 From: Fizzlepoof Date: Sat, 23 May 2026 20:23:27 +0000 Subject: [PATCH] Expose Authentik on public Pangolin hostname --- docs/architecture/SERVICES_DIRECTORY.md | 3 ++- identity-authentik/README.md | 2 +- monitoring/.env.example | 2 +- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/architecture/SERVICES_DIRECTORY.md b/docs/architecture/SERVICES_DIRECTORY.md index 331c507..d120167 100644 --- a/docs/architecture/SERVICES_DIRECTORY.md +++ b/docs/architecture/SERVICES_DIRECTORY.md @@ -25,7 +25,8 @@ All homelab services, their hosts, ports, and current status. | Shlink | 8087 | http://pd:8087 | ✅ Active | | Shlink Web Client | 8088 | http://pd:8088 | ✅ Active | | RackPeek | 8283 | http://pd:8283 | ✅ Active | -| Authelia | 9091 | http://pd:9091 / https://auth.paccoco.com | ✅ Active internally on PD; Traefik is ready to enforce app auth once Pangolin targets are cut over | +| Authelia | 9091 | http://pd:9091 / https://auth.paccoco.com | ✅ Active internally on PD; currently fronts the Traefik-protected app layer | +| Authentik | 9000 | http://pd:9000 / https://authentik.paccoco.com | ✅ Active; public Pangolin hostname live for OIDC/SAML migration work | ## AI Stack diff --git a/identity-authentik/README.md b/identity-authentik/README.md index 88b3aee..c61e8ec 100644 --- a/identity-authentik/README.md +++ b/identity-authentik/README.md @@ -41,7 +41,7 @@ Bootstrap: docker logs authentik-server --tail=50 curl -fsS http://127.0.0.1:9000/-/health/ready/ -6. Complete initial login with the bootstrap admin on the internal URL first, then wire the public auth route. +6. Complete initial login with the bootstrap admin on the internal URL first, then wire the public Pangolin hostname `https://authentik.paccoco.com`. Grafana and other OIDC clients should use that public hostname instead of the LAN-only `http://10.5.30.6:9000` base URL. 7. Build providers before cutover: - Grafana: OAuth2/OIDC provider diff --git a/monitoring/.env.example b/monitoring/.env.example index 064d1e5..60f1d3d 100644 --- a/monitoring/.env.example +++ b/monitoring/.env.example @@ -5,7 +5,7 @@ GF_ADMIN_USER=admin GF_ADMIN_PASS=CHANGE_ME GF_HOST=grafana.paccoco.com LOKI_HOST=loki.paccoco.com -AUTHENTIK_URL=https://auth.paccoco.com +AUTHENTIK_URL=https://authentik.paccoco.com GF_AUTHENTIK_APP_SLUG=grafana GF_AUTH_GENERIC_OAUTH_ENABLED=true GF_AUTH_GENERIC_OAUTH_NAME=Authentik