Everything changed - major rewrite
This commit is contained in:
@@ -188,6 +188,17 @@ in
|
||||
requires = lib.mkAfter [ "mnt-data.mount" "podman-homey-network.service" ];
|
||||
};
|
||||
|
||||
# -----------------------------------------------------------------------
|
||||
# Authelia access control — one_factor for all authenticated users.
|
||||
# Caddy does not apply forward_auth (git clients can't handle SSO redirects)
|
||||
# but the rule is here for completeness/Cloudflare Tunnel path.
|
||||
# -----------------------------------------------------------------------
|
||||
homey.authelia.accessControlRules = [{
|
||||
priority = 50;
|
||||
domain = [ "git.${domain}" ];
|
||||
policy = "one_factor";
|
||||
}];
|
||||
|
||||
# -----------------------------------------------------------------------
|
||||
# Caddy virtual host — no forward_auth; git clients can't handle SSO redirects
|
||||
# -----------------------------------------------------------------------
|
||||
|
||||
Reference in New Issue
Block a user