 wmantly
|
fb7a7559b7
|
Bump proxy submodule to cca5e48 (per-host SSO, host modal, basic auth)
Updates the pinned proxy submodule from 94ad614 to cca5e48, bringing in:
- per-host SSO (#57): OpenResty gate + Node auth endpoints + Redis sessions
- host modal redesign (tabbed), wildcard-child default, allow-list autocomplete
- per-host HTTP basic auth (#57)
- user-creation + password-policy fixes (#48)
- scheduler DNS-domain-list refresh (#69)
- removal of unused invite / SSH-key user features
sso-manager-node unchanged (already at its master tip, fe9b7c1).
Config compatibility: the proxy's oidc / auth / ldap conf shape is unchanged,
so the proxy.env setup.sh generates (app_oidc__*, app_ldap__*, app_auth__*) is
still consumed as-is. New optional sections (hostSso, service.hostScheduler,
dynamicDns) ship with defaults and need no proxy.env entries.
Co-Authored-By: Claude <noreply@anthropic.com>
|
2026-07-11 20:45:06 -04:00 |
|
|
wmantly
|
9fb240ff45
|
theta-env: unified SSO Manager + Proxy stack with one-command setup
Composes theta42/sso-manager-node and theta42/proxy (as git submodules) on a
single Docker network and automates first-run wiring.
- docker-compose.yml: sso-manager (build ./sso-manager-node/Dockerfile.openldap)
+ proxy (build ./proxy/Dockerfile) on theta-net; SSO UI + mgmt port bound to
localhost, LDAPS published, proxy 80/443/4443 published.
- setup.sh: idempotent one-command bring-up — validates .env, starts SSO, runs
the bootstrap, writes ./proxy.env, starts the proxy, prints admin login.
- bootstrap/bootstrap.js: runs inside the sso-manager container (self-contained,
Node built-ins + fetch only) — creates the LDAP service account, first admin
(+ app_sso_admin/app_sso_oauth_admin membership), registers the proxy as an
OIDC client via the SSO HTTP API, emits CLIENT_ID/CLIENT_SECRET.
- .env.example: all tunables (LDAP_BASE_DN, LDAP_ADMIN_PASS, JWT_SECRET,
SSO_HOST, PROXY_HOST, BOOTSTRAP_ADMIN_*, LDAP_SERVICE_PASS, SMTP_*, ports).
- README.md + docs/ (Jekyll site for GitHub Pages): quickstart, architecture,
standalone usage.
Co-Authored-By: Claude <noreply@anthropic.com>
|
2026-07-11 17:04:36 -04:00 |
|