From e7bf33762441f7e3b9d05acf399b7c1ddb570179 Mon Sep 17 00:00:00 2001 From: atlas Date: Wed, 14 Oct 2026 01:13:33 +0200 Subject: [PATCH] docs: swarm services publish authelia's /metrics to the collector --- docs/swarm/services.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/docs/swarm/services.md b/docs/swarm/services.md index 94e020f5..26628c8b 100644 --- a/docs/swarm/services.md +++ b/docs/swarm/services.md @@ -122,6 +122,11 @@ small-deployment choices, and the scope is the justification: redis buys shared session state across replicas and there is one instance; SMTP exists to mail humans, and provisioning here is programmatic. +The swarm collector scrapes authelia's own metrics at +`https:///metrics`, whichever host runs the +container. The gateway admits only the collector's OAuth2 client there; +any other session gets `deny`. + See [`sso.md`](sso.md) for bootstrapping the first user and the OIDC relying-party flow, and [`secrets.md`](secrets.md) for where authelia generates and reads each of its keys.