|
|
19ae62da45
|
feat(auth): use Authelia binary for password hashing instead of own argon2
|
2026-06-14 17:24:28 +00:00 |
|
|
|
e8906df62e
|
fix(installer): chown data dir after smoke test so service can write
|
2026-06-14 17:14:08 +00:00 |
|
|
|
ed9710d704
|
fix(auth): use standard base64 (not URL-safe) for argon2 encoding to match Authelia
|
2026-06-14 17:13:39 +00:00 |
|
|
|
c68698bd2e
|
fix(auth): use base64 for argon2 hash encoding, matching Authelia format
|
2026-06-14 17:08:46 +00:00 |
|
|
|
5953736ddb
|
fix(installer): chown authelia dir AFTER users_database.yml is written
|
2026-06-14 16:58:26 +00:00 |
|
|
|
101009c872
|
fix(installer): chown -R entire /opt/ directories to service user
|
2026-06-14 16:52:11 +00:00 |
|
|
|
4ac067e91d
|
fix(installer): restore BIN_DIR, DATA_DIR, STATIC_DIR, CONFIG_FILE, INSTALL_DIR
|
2026-06-14 16:43:13 +00:00 |
|
|
|
1422207482
|
fix(installer): env file to cwd, silence test noise
|
2026-06-14 16:40:38 +00:00 |
|
|
|
4f4a00757e
|
fix(installer): restore service user creation and SUDO variable
|
2026-06-14 16:40:17 +00:00 |
|
|
|
aefffb70db
|
fix(installer): remove stale SYS_HOME reference
|
2026-06-14 16:38:22 +00:00 |
|
|
|
b2e1732161
|
fix(installer): move REPO_DIR before ENV_FILE to fix unbound variable
|
2026-06-14 16:37:25 +00:00 |
|
|
|
3589cfd280
|
fix: both services run as dedicated nextwks user, remove SYS_HOME cruft
|
2026-06-14 16:34:59 +00:00 |
|
|
|
7b3ba23c82
|
fix(installer): create dedicated nextwks service user, chown deployed files
|
2026-06-14 16:34:17 +00:00 |
|
|
|
e978e08424
|
feat(installer): auto-install Authelia — one script deploys everything
|
2026-06-14 16:23:56 +00:00 |
|
|
|
9a4055df1b
|
fix(installer): silence test noise, add Authelia missing reminder
|
2026-06-14 16:21:47 +00:00 |
|
|
|
16f4870efe
|
fix(installer): stop existing service before smoke test to avoid port conflict
|
2026-06-14 16:18:51 +00:00 |
|
|
|
ce418b6f0c
|
fix(installer): set config and data ownership to deploying user
|
2026-06-14 16:14:56 +00:00 |
|
|
|
73eaa27c6b
|
fix(installer): auto-start service, remove dead flag references
|
2026-06-14 16:13:54 +00:00 |
|
|
|
3b4fd6a84c
|
refactor(installer): KISS — remove all flags, just interactive deploy
|
2026-06-14 16:03:33 +00:00 |
|
|
|
d29ecf41ef
|
docs: update README with sudo for all installer commands
|
2026-06-14 16:02:04 +00:00 |
|
|
|
17170c762a
|
feat(installer): run as root with sudo where needed, systemd service user-aware
|
2026-06-14 16:00:41 +00:00 |
|
|
|
7cdff22565
|
fix(installer): detect piped stdin, save to file for interactive wizard
|
2026-06-14 15:57:08 +00:00 |
|
|
|
0211244076
|
fix(installer): auto-clone repo when running standalone from curl|bash
|
2026-06-14 15:54:44 +00:00 |
|
|
|
631780cdf6
|
fix(installer): clean old Authelia DB on fresh install to avoid encryption key mismatch
|
2026-06-14 15:44:49 +00:00 |
|
|
|
50648f9c43
|
fix(installer): add missing notifier section, create Authelia users_database.yml on fresh install
|
2026-06-14 15:43:26 +00:00 |
|
|
|
76c48ec399
|
fix(installer): remove conflicting default_redirection_url, add JWT secret for password reset
|
2026-06-14 15:41:51 +00:00 |
|
|
|
1255fc39ea
|
build: simplify — always build from source, self-hosted deployment
|
2026-06-14 15:36:05 +00:00 |
|
|
|
9c03571555
|
build: installer supports download of pre-built binary, no Go required for end users
|
2026-06-14 15:34:27 +00:00 |
|
|
|
afb3984573
|
build: add update.sh with version check, approval, backup, and rollback
|
2026-06-14 15:31:03 +00:00 |
|
|
|
827c8ef116
|
build: rewrite installer as single interactive wizard with Authelia config generation
|
2026-06-14 15:27:32 +00:00 |
|
|
|
f6fba3ab62
|
chore: clean empty placeholder dirs, tidy .gitignore, add .gitkeep for runtime dirs
|
2026-06-14 15:11:31 +00:00 |
|
|
|
93104b24d6
|
build: add versioning (2026.6.0001) with ldflags and /api/version endpoint
|
2026-06-14 15:09:02 +00:00 |
|
|
|
f66bf88d47
|
fix(auth): extract preferred_username from JWT instead of sub (UUID)
|
2026-06-14 15:05:27 +00:00 |
|
|
|
743f745cbf
|
fix(auth): add PKCE support for public OIDC client
|
2026-06-14 15:03:17 +00:00 |
|
|
|
9922349351
|
feat(auth): implement OIDC token exchange to get real username from Authelia
|
2026-06-14 15:00:04 +00:00 |
|
|
|
1780cea340
|
fix(auth): export IsAdmin, fix bearer token fallback chain
|
2026-06-14 14:58:02 +00:00 |
|
|
|
7c0d5a7b91
|
fix(auth): combine session+role and bearer token as fallback for admin API
|
2026-06-14 14:57:13 +00:00 |
|
|
|
3c365e8206
|
feat(auth): replace bearer token with OIDC session + admin role check, auto-fix roles from groups
|
2026-06-14 14:56:39 +00:00 |
|
|
|
3f2a7b81cf
|
fix(auth): Admin UI pages use OIDC session auth, API stays bearer token
|
2026-06-14 14:54:50 +00:00 |
|
|
|
c89f823cb6
|
fix(auth): chain session middleware before auth gate to prevent redirect loop
|
2026-06-14 14:52:25 +00:00 |
|
|
|
3ccaada226
|
docs: update test instructions with credentials, simplified for production deployment
|
2026-06-14 14:47:49 +00:00 |
|
|
|
6873e474be
|
fix(auth): support form_post OIDC callback and add POST /auth/callback route
|
2026-06-14 14:43:12 +00:00 |
|
|
|
6f65d25c3f
|
fix(config): change OIDC issuer to auth.lohmar.co.uk, add Authelia access rule
|
2026-06-14 14:17:05 +00:00 |
|
|
|
0a1770acc4
|
fix(sync): add error logging, fix systemd ReadWritePaths, add role field, interactive admin creation in installer
|
2026-06-14 14:11:38 +00:00 |
|
|
|
34672eaedb
|
fix(auth): add oidc.issuer_url to use public-facing Authelia URL for browser redirects
|
2026-06-14 14:00:55 +00:00 |
|
|
|
e80b04e0c1
|
fix(ui): add StripPrefix for static file serving in production
|
2026-06-14 13:55:44 +00:00 |
|
|
|
3911dcafa5
|
docs: add README and manual test instructions (35 protocols across 9 suites)
|
2026-06-14 13:51:11 +00:00 |
|
|
|
5f9dec740c
|
build(core): polish installer with smoke test, status check, and production-ready systemd service
|
2026-06-14 13:24:48 +00:00 |
|
|
|
926c25018e
|
fix(config): update workspace URL to wks.lohmar.co.uk
|
2026-06-14 13:23:32 +00:00 |
|
|
|
61d339b940
|
feat(ui): implement workspace launcher landing page, OIDC auth gate, and PWA shell
|
2026-06-14 13:20:34 +00:00 |
|
