vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

swarm-authelia: run in its own network namespace

Browse source 
Refs #4815
This commit is contained in:
atlas 2026-10-21 21:26:13 +02:00 • committed by mara
commit 220b51d0a3
1 changed files with 204 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

3
swarm-authelia-bridge/README.md
View file

@ -33,7 +33,8 @@ simply owns the file it writes. No elevated privilege anywhere.
- No restart of authelia after a write — relies on
`authentication_backend.file.watch`, confirmed working against the
pinned 4.39.20 build during this design work.
- Listens on loopback. The authelia vhost proxies `/bridge/` to it with
- Listens on the unix socket named by `SWARM_AUTHELIA_BRIDGE_SOCKET` (mode
`0660`, in a directory shared with the host's nginx). The authelia vhost proxies `/bridge/` to it with
the prefix stripped, so `swarm-controller` on any host calls
`https://<swarm.authelia.domain>/bridge/requests`.