Everything changed - major rewrite

2026-06-07 00:59:22 +03:00
parent 08e8b5edbe
commit 261cf892dd
20 changed files with 673 additions and 139 deletions
@@ -285,6 +285,14 @@ in
      };
    };

+    # -----------------------------------------------------------------------
+    # Authelia access control — admins only, two_factor; all others denied.
+    # -----------------------------------------------------------------------
+    homey.authelia.accessControlRules = [
+      { priority = 25; domain = [ "uptime.${domain}" ]; subject = [ "group:admins" ]; policy = "two_factor"; }
+      { priority = 26; domain = [ "uptime.${domain}" ]; policy = "deny"; }
+    ];
+
    # -----------------------------------------------------------------------
    # Caddy virtual host — forward_auth, admins only
    # -----------------------------------------------------------------------