ginnoir/homelabstack
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Complete TB-006 batch 1 SSO so admin apps use Authentik without double login.
Deploy to valhalla / deploy (push) Has been cancelled
Details

Browse Source 
Native OAuth/OIDC for Homarr, BookStack, Gitea, and MinIO console; forward_auth with local auth disabled for code-server, uptime, and kopia; Caddy and Authentik scripts updated to match.
This commit is contained in:
ginnoir
2026-06-10 23:52:14 -05:00
parent 109cc0d5cb
commit 63889fc150
19 changed files with 424 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Caddyfile
+30 -60
View File
@@ -210,13 +210,7 @@ storage.j-costa.com, https://storage.j-costa.com {
# MINIO CONSOLE — internal only
# =============================================================
minio.ginnoir.com {
route {
import authentik_outpost
handle {
import authentik_forward_auth
reverse_proxy resume-minio:9001
}
}
reverse_proxy resume-minio:9001
}
# =============================================================
@@ -238,19 +232,15 @@ dev.ginnoir.com {
# MANAGEMENT — internal only
# =============================================================
portainer.ginnoir.com {
route {
import authentik_outpost
@webhook {
method POST
path /api/stacks/webhooks/*
}
handle @webhook {
reverse_proxy portainer:9000
}
handle {
import authentik_forward_auth
reverse_proxy portainer:9000
}
@webhook {
method POST
path /api/stacks/webhooks/*
}
handle @webhook {
reverse_proxy portainer:9000
}
handle {
reverse_proxy portainer:9000
}
}
@@ -265,13 +255,7 @@ uptime.ginnoir.com {
}
homarr.ginnoir.com {
route {
import authentik_outpost
handle {
import authentik_forward_auth
reverse_proxy homarr:7575
}
}
reverse_proxy homarr:7575
}
backup.ginnoir.com {
@@ -293,20 +277,16 @@ router.ginnoir.com {
# DEV STACK — internal only
# =============================================================
gitea.ginnoir.com {
route {
import authentik_outpost
@api path /api/*
@git path_regexp (?i)\.git(/|$)
handle @api {
reverse_proxy gitea:3000
}
handle @git {
reverse_proxy gitea:3000
}
handle {
import authentik_forward_auth
reverse_proxy gitea:3000
}
@api path /api/*
@git path_regexp (?i)\.git(/|$)
handle @api {
reverse_proxy gitea:3000
}
handle @git {
reverse_proxy gitea:3000
}
handle {
reverse_proxy gitea:3000
}
}
@@ -360,28 +340,18 @@ vault.ginnoir.com {
}
docs.ginnoir.com {
route {
import authentik_outpost
handle {
import authentik_forward_auth
reverse_proxy bookstack:80
}
}
reverse_proxy bookstack:80
}
plane.ginnoir.com {
route {
import authentik_outpost
handle /api/* {
reverse_proxy plane_api:8000
}
handle /auth/* {
reverse_proxy plane_api:8000
}
handle {
import authentik_forward_auth
reverse_proxy plane_web:3000
}
handle /api/* {
reverse_proxy plane_api:8000
}
handle /auth/* {
reverse_proxy plane_api:8000
}
handle {
reverse_proxy plane_web:3000
}
}