wmantly
a917915037
Unifies the GitHub Pages docs site: the SSO/Proxy/Jump Host pages, their
nav labels, and each component's own README now consistently say Theta
Directory / Theta Proxy / Theta Gateway, drop marketing sections ("Why this
over the alternatives", "Get it", "Related projects") that don't apply to a
suite component, remove every standalone/bare-metal install path, and link
to theta42.github.io/theta-suite/... instead of the old per-repo Pages sites.
Bumps submodules: theta-directory v2.0.2, proxy v2.0.1, jump-host v2.0.1.
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
52 lines
3.4 KiB
Markdown
52 lines
3.4 KiB
Markdown
---
|
|
layout: default
|
|
title: Home
|
|
description: Theta Directory — the OpenID Connect provider, bundled OpenLDAP directory, and resource inventory at the core of theta-suite. One login for your modern apps, one LDAP directory for the rest, no phone-home.
|
|
---
|
|
|
|
# Theta Directory
|
|
|
|
The identity and directory component of [theta-suite](../): an **OpenID
|
|
Connect provider**, a bundled **OpenLDAP directory**, and a **resource
|
|
inventory & IAM engine**, all behind one web console.
|
|
|
|
One place to manage your users and groups, one login (OIDC) your modern apps
|
|
can use, and one LDAP directory your older or odder apps can bind to directly
|
|
— plus a graph of every site, host, and service you run, with auto-provisioned
|
|
access groups. Everything runs on your own hardware; no phone-home, no hosted
|
|
control plane, no per-user pricing.
|
|
|
|
Theta Directory is deployed as part of theta-suite, alongside
|
|
[Proxy](../proxy/) and [Jump Host](../jump-host/) — it isn't installed or run
|
|
on its own. See the [Quickstart](../quickstart.html) to stand up the whole
|
|
stack with one command.
|
|
|
|
## Screenshots
|
|
|
|
<a href="images/dashboard.png" target="_blank"><img src="images/dashboard.png" alt="Overview dashboard" width="49%"></a>
|
|
<a href="images/users.png" target="_blank"><img src="images/users.png" alt="User list" width="49%"></a>
|
|
<a href="images/groups.png" target="_blank"><img src="images/groups.png" alt="Groups" width="49%"></a>
|
|
<a href="images/directory.png" target="_blank"><img src="images/directory.png" alt="Directory & inventory" width="49%"></a>
|
|
<a href="images/oauth-clients.png" target="_blank"><img src="images/oauth-clients.png" alt="OAuth client (edit view)" width="49%"></a>
|
|
<a href="images/agent-capabilities-metrics.png" target="_blank"><img src="images/agent-capabilities-metrics.png" alt="Agent capabilities & metrics" width="49%"></a>
|
|
<a href="images/agent-install-join-key.png" target="_blank"><img src="images/agent-install-join-key.png" alt="Agent install with join key" width="49%"></a>
|
|
|
|
*(click any screenshot to view full size)*
|
|
|
|
## Features
|
|
|
|
- **OpenID Connect / OAuth 2.0 provider** — your own access/refresh/ID
|
|
tokens; standard discovery document at `/.well-known/openid-configuration`.
|
|
- **Bundled OpenLDAP directory** — users, groups, POSIX accounts, SSH public
|
|
keys, and sudo roles, with `memberOf` + referential-integrity overlays.
|
|
- **Web management UI** — users, groups, and OAuth clients from a browser;
|
|
invite and password-reset flows over email; self-service profile + API
|
|
tokens.
|
|
- **Direct LDAP binds** — anything that binds LDAP directly (Linux hosts
|
|
via PAM/SSSD, Gitea, Emby, …) uses LDAPS/StartTLS against the same
|
|
directory.
|
|
- **Geo-Location Scaling** — built-in support for N-Way Multi-Master OpenLDAP [replication](replication.html) across physical sites.
|
|
- **[Directory & Inventory](directory.html)** — map sites, hosts, and services as a graph with rich metadata (IP/MAC, OS/kernel, ports, git repos), auto-provisioned access groups, and automatic registration from theta-suite's agents and discovery plugins. Drives directory-aware tools like the [SSH jump host](../jump-host/).
|
|
- **Subtype metrics & lifecycle drivers** — telemetry, log streaming, and remote control for resources tagged with a `subType` (`systemd`, `docker`, `proxmox`, `wireguard`, `postgresql`, `redis`, `k8s`, …).
|
|
- **OpenBao-backed secrets** — per-resource and per-user secrets with explicit upward inheritance (`Resource → Host → Cluster → Site`).
|