vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

swarm-authelia: run in its own network namespace

Browse source 
Refs #4815
This commit is contained in:
atlas 2026-10-21 21:26:13 +02:00 • committed by mara
commit 220b51d0a3
1 changed files with 204 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/module-eval/swarm-otel-identity.nix
View file

@ -236,7 +236,7 @@ let
}
{
# The location the collector's job requests: gated, and proxying to the
# loopback listener that has no authentication of its own.
# socket listener that has no authentication of its own.
name = "authelia's vhost serves /metrics only behind the collector's auth subrequest";
ok =
let
@ -244,7 +244,7 @@ let
locs = autheliaOnly.services.nginx.virtualHosts.${h.swarm.authelia.domain}.locations;
authz = locs."= /__authelia_metrics_authz";
in
locs."= /metrics".proxyPass == "http://127.0.0.1:${toString h.swarm.authelia.metricsPort}/metrics"
locs."= /metrics".proxyPass == "http://unix:/run/swarm-authelia/metrics.sock:/"
&& lib.hasInfix "auth_request /__authelia_metrics_authz;" locs."= /metrics".extraConfig
&& authz.proxyPass == "https://${h.swarm.authelia.domain}/api/authz/auth-request"
&& lib.hasInfix "internal;" authz.extraConfig;