diff --git a/docs/swarm/services.md b/docs/swarm/services.md index 94e020f5..26628c8b 100644 --- a/docs/swarm/services.md +++ b/docs/swarm/services.md @@ -122,6 +122,11 @@ small-deployment choices, and the scope is the justification: redis buys shared session state across replicas and there is one instance; SMTP exists to mail humans, and provisioning here is programmatic. +The swarm collector scrapes authelia's own metrics at +`https:///metrics`, whichever host runs the +container. The gateway admits only the collector's OAuth2 client there; +any other session gets `deny`. + See [`sso.md`](sso.md) for bootstrapping the first user and the OIDC relying-party flow, and [`secrets.md`](secrets.md) for where authelia generates and reads each of its keys.