Skip to content

feat: add Authelia OIDC provider service#15

Open
tseaver wants to merge 19 commits into
mainfrom
feat-2-authelia-service-claude-gen
Open

feat: add Authelia OIDC provider service#15
tseaver wants to merge 19 commits into
mainfrom
feat-2-authelia-service-claude-gen

Conversation

@tseaver
Copy link
Copy Markdown
Contributor

@tseaver tseaver commented Apr 20, 2026

No description provided.

@tseaver tseaver requested a review from runyaga April 20, 2026 15:39
tseaver added 19 commits April 21, 2026 00:13
Issues:

- Soliplex back-end doesn't understand the auth scheme which Authelia
  is providing.

- Can't use 'localhost:9443', becauze Authelia reasons.

- Not authenticating correctly when using 'https://127.0.0.1:9443'
  as server URL in the flutter app.
Remove now-spurious 'auth_request' config from 'nginx'.

Update secrets required and the 'generate-secrets.sh' script
accordingly.
- 'authelia/configuration.yml.in'
- 'backend/environment/oidc/cacert.pem.in'
- 'backend/environment/oidc/config.yaml.in'

Add the generated files to '.gitignore'.
…yml'

It cannot be read via a '*_FILE' environment variable.

Update 'authelia' to run as '1000:1000'.
... rather than 'COPY' into the image.
Previously, runnin the script rotated all secrets, which broke the DB
passwords stored in the 'postgres_data' volume.
The 'Authelia' OIDC flow relies on having the same hostname / port in
the 'request_redirect' URL as seen from the browser.
Avoid having it go stale across Authelia version bumps.
- Add formatters for loggers ('soliplex', 'soliplex-authn'), including
  OIDC claim fields for authenticated requests.

- Add handlers for loggers ('soliplex', 'soliplex-authn', 'soliplex-authz')
  to demonstrate configuration.
Remove commit patching 'backend/Dockerfile' to work around soliplex #901,
fixed in version '0.60.1'.
Pick up file upload fixes.
@tseaver tseaver force-pushed the feat-2-authelia-service-claude-gen branch from cfb6d33 to ceebecb Compare April 21, 2026 04:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant