fizzlepoof/truenas-stacks
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ingress: switch dns hostname to technitium native oidc
Some checks failed
secret-guardrails / artifact-secret-scan (push) Has been cancelled
Details
secret-guardrails / gitleaks (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Fizzlepoof
2026-05-23 22:24:33 +00:00
parent 26d5407b86
commit db41861935
3 changed files with 66 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/operations/IDENTITY_AND_SSO.md
View File

@@ -23,9 +23,11 @@ Traefik is the internal router and Authelia is the policy engine.
Current intended protected domains:
- `gitea.paccoco.com`
- `grafana.paccoco.com`
- `dns.paccoco.com`
- `traefik.paccoco.com`
App-native SSO exception:
- `dns.paccoco.com` now uses Technitium's own OIDC flow with Authentik instead of Traefik forward-auth, so the app owns `/sso/login` and `/sso/callback` directly.
Current baseline group policy:
- `admins` -> full access to the domains above