wmantly
f7df04c2f0
theta-env orchestration:
- setup.sh: idempotent OpenBao policies (sso-broker, sso-admin, proxy,
jump-host), sso-broker token role (allowed_policies_glob user-*/app-*,
24h), mint scoped SSO/PROXY/JUMP_VAULT_TOKEN (orphan, .env reuse),
seed_app_conf seeds secret/{sso-manager,proxy,jump-host}/conf. Bootstrap
exec passes root VAULT_ADDR/VAULT_TOKEN for seeding. Root token never
reaches a service container. shellcheck -S warning clean.
- docker-compose.yml: VAULT_ADDR + VAULT_TOKEN env for sso/proxy/jump;
proxy/jump depends_on openbao service_started.
- bootstrap/bootstrap.js: baoPut() writes generated OAuth creds to
secret/proxy/conf + secret/jump-host/conf (OpenBao authoritative).
- docs/secrets.md (new): full secrets architecture. README + nav updated.
Submodule bumps:
- sso-manager-node -> v1.16.0 (OpenBao broker + vault UI + remediation)
- proxy -> v1.13.1 (via v1.13.0: OpenBao boot)
- jump-host -> v1.14.1 (via v1.14.0: OpenBao boot)
- ldap-client unchanged
Co-Authored-By: Claude <noreply@anthropic.com>
45 lines
1.1 KiB
YAML
45 lines
1.1 KiB
YAML
title: theta-env
|
|
description: A unified, one-command SSO Manager + OIDC proxy stack for home labs and small businesses.
|
|
url: "https://theta42.github.io"
|
|
baseurl: "/theta-env"
|
|
logo: /assets/img/theta42.svg
|
|
lang: en_US
|
|
|
|
plugins:
|
|
- jekyll-seo-tag
|
|
- jekyll-sitemap
|
|
|
|
github:
|
|
repository_url: https://github.com/theta42/theta-env
|
|
zip_url: https://github.com/theta42/theta-env/archive/refs/heads/master.zip
|
|
tar_url: https://github.com/theta42/theta-env/archive/refs/heads/master.tar.gz
|
|
repository_name: theta42/theta-env
|
|
|
|
nav:
|
|
- title: Home
|
|
page: /
|
|
icon: fa-house
|
|
- title: Quickstart
|
|
page: /quickstart.html
|
|
icon: fa-rocket
|
|
- title: Architecture
|
|
page: /architecture.html
|
|
icon: fa-sitemap
|
|
- title: Secrets
|
|
page: /secrets.html
|
|
icon: fa-key
|
|
- title: Standalone
|
|
page: /standalone.html
|
|
icon: fa-puzzle-piece
|
|
- title: Changelog
|
|
url: https://github.com/theta42/theta-env/blob/master/CHANGELOG.md
|
|
icon: fa-list
|
|
|
|
defaults:
|
|
- scope:
|
|
path: ""
|
|
type: "pages"
|
|
values:
|
|
layout: default
|
|
image: /assets/img/theta42.svg
|