wmantly
a917915037
Unifies the GitHub Pages docs site: the SSO/Proxy/Jump Host pages, their
nav labels, and each component's own README now consistently say Theta
Directory / Theta Proxy / Theta Gateway, drop marketing sections ("Why this
over the alternatives", "Get it", "Related projects") that don't apply to a
suite component, remove every standalone/bare-metal install path, and link
to theta42.github.io/theta-suite/... instead of the old per-repo Pages sites.
Bumps submodules: theta-directory v2.0.2, proxy v2.0.1, jump-host v2.0.1.
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
3.4 KiB
layout, title, description
| layout | title | description |
|---|---|---|
| default | Home | Theta Directory — the OpenID Connect provider, bundled OpenLDAP directory, and resource inventory at the core of theta-suite. One login for your modern apps, one LDAP directory for the rest, no phone-home. |
Theta Directory
The identity and directory component of theta-suite: an OpenID Connect provider, a bundled OpenLDAP directory, and a resource inventory & IAM engine, all behind one web console.
One place to manage your users and groups, one login (OIDC) your modern apps can use, and one LDAP directory your older or odder apps can bind to directly — plus a graph of every site, host, and service you run, with auto-provisioned access groups. Everything runs on your own hardware; no phone-home, no hosted control plane, no per-user pricing.
Theta Directory is deployed as part of theta-suite, alongside Proxy and Jump Host — it isn't installed or run on its own. See the Quickstart to stand up the whole stack with one command.
Screenshots
(click any screenshot to view full size)
Features
- OpenID Connect / OAuth 2.0 provider — your own access/refresh/ID
tokens; standard discovery document at
/.well-known/openid-configuration. - Bundled OpenLDAP directory — users, groups, POSIX accounts, SSH public
keys, and sudo roles, with
memberOf+ referential-integrity overlays. - Web management UI — users, groups, and OAuth clients from a browser; invite and password-reset flows over email; self-service profile + API tokens.
- Direct LDAP binds — anything that binds LDAP directly (Linux hosts via PAM/SSSD, Gitea, Emby, …) uses LDAPS/StartTLS against the same directory.
- Geo-Location Scaling — built-in support for N-Way Multi-Master OpenLDAP replication across physical sites.
- Directory & Inventory — map sites, hosts, and services as a graph with rich metadata (IP/MAC, OS/kernel, ports, git repos), auto-provisioned access groups, and automatic registration from theta-suite's agents and discovery plugins. Drives directory-aware tools like the SSH jump host.
- Subtype metrics & lifecycle drivers — telemetry, log streaming, and remote control for resources tagged with a
subType(systemd,docker,proxmox,wireguard,postgresql,redis,k8s, …). - OpenBao-backed secrets — per-resource and per-user secrets with explicit upward inheritance (
Resource → Host → Cluster → Site).