vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

wire swarm-authelia-bridge: systemd unit, oidc client, controller auth env

Browse source
This commit is contained in:
damocles 2026-08-16 21:59:02 +02:00 • committed by mara
commit c1eb6b9834
4 changed files with 215 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nix/packages/default.nix
View file

@ -156,6 +156,12 @@ in
# rather than every hive's.
swarm-nats-auth = mkBinPackage "swarm-nats-auth" "hyperhive swarm queue auth-callout responder";
# The only process allowed to write swarm-authelia's users database —
# same "runs *inside* a container, not on the host" placement as
# `swarm-nats-auth` above (this one lives in `swarm-authelia`'s
# container, as authelia's own user, not the host's closure).
swarm-authelia-bridge = mkBinPackage "swarm-authelia-bridge" "hyperhive swarm-authelia users-database write bridge";
# The swarm operator's CLI, out of `daemonBins` for the same reason as
# the daemon above: it is installed by the swarm-controller module on
# the one host that runs the controller, and belongs in that hive's