add authelia as a stub operator ancilliary node, mirroring garage #910

Merged

kiara merged 2 commits from kiara/fediversity:ancilliary-authelia into main 2026-05-06 23:34:50 +02:00

Conversation 0 Commits 2 Files changed 8 +183

kiara commented 2026-05-06 23:08:33 +02:00

Owner

Copy link

Wires authelia symmetrically with garage: adds a resources.authelia module with request/policy/resource-type structure, an ancilliaryRequests.authelia collection field in hosts-common.nix, an app == "authelia" dispatch branch, a placeholder machine entry in operator group, and an application module so the per-app loop reaches it. Concrete OIDC/forward-auth semantics are out of scope (stubbed with TODOs); the new operator-authelia NixOS config materializes and deployment-nixos-hosts passes unchanged.

while this is just a modest start to #212, for now it would at least unblock moving garage to hosting-provider (#187).

Wires `authelia` symmetrically with `garage`: adds a `resources.authelia` module with `request`/`policy`/`resource-type` structure, an `ancilliaryRequests.authelia` collection field in `hosts-common.nix`, an `app == "authelia"` dispatch branch, a placeholder machine entry in `operator` group, and an application module so the per-app loop reaches it. Concrete OIDC/forward-auth semantics are out of scope (stubbed with TODOs); the new `operator-authelia` NixOS config materializes and `deployment-nixos-hosts` passes unchanged. while this is just a modest start to #212, for now it would at least unblock moving garage to `hosting-provider` (#187).

kiara requested review from developers 2026-05-06 23:08:33 +02:00

kiara force-pushed ancilliary-authelia from c3951754f4 to de39efe9d3 2026-05-06 23:11:30 +02:00 Compare

kiara added 1 commit 2026-05-06 23:26:33 +02:00

fix: use separate resource namespace for authelia policy ... 4c8fab17ed

`attrTag` only accepts a single tag per key, so `"external"` could not
hold both `garage` and `authelia` policies simultaneously. Use a
dedicated `"auth-server"` key for the authelia policy, mirroring how
`"external"` is reserved for garage.

Assisted-by: Claude:claude-sonnet-4-6

kiara referenced this pull request 2026-05-06 23:29:06 +02:00

WIP: add authelia as ancilliary node, mirroring garage #909

kiara merged commit 5e453172ae into main 2026-05-06 23:34:50 +02:00

kiara referenced this pull request from a commit 2026-05-06 23:34:50 +02:00

add `authelia` as a stub operator ancilliary node, mirroring `garage` (#910)

kiara referenced this pull request from a commit 2026-05-07 17:13:09 +02:00

fix panel tests: add `authelia` to test fixtures

kiara referenced this pull request 2026-05-08 19:13:57 +02:00

Extract inline python code #832

Sign in to join this conversation.

Reviewers

No reviewers

fediversity/developers

Labels

Clear labels   

0 points

fibonacci complexity: 0 points

  

0.5 points

fibonacci complexity: 0.5 points

  

1 point

fibonacci complexity: 1 point

  

13 points

fibonacci complexity: 13 points

  

2 points

fibonacci complexity: 2 points

  

21 points

fibonacci complexity: 21 points

  

3 points

fibonacci complexity: 3 points

  

34 points

fibonacci complexity: 34 points

  

5 points

fibonacci complexity: 5 points

  

55 points

fibonacci complexity: 55 points

  

8 points

fibonacci complexity: 8 points

  

ambition

application-offering

  

ambition

configure-applications

  

ambition

front-end

  

ambition/install-applications

  

ambition

security

  

ambition

switch-host

  

ambition

update-applications

  

ambition

user-management

  

api service

features that may relate more to a (to be created) API service

  

blocked

  

component: fediversity panel

  

component: nixops4

  

documentation

  

estimation high: >3d

  

estimation low: <2h

  

estimation mid: <8h

  

infinite points

fibonacci complexity: infinite points

  

productisation

features out-scoped with the decoupling of the productisation effort

  

project-management

Project management related tasks

  

question

  

role: application developer

  

role: application operator

  

role: hosting provider

  

role: maintainer

  

security

  

technical debt

  

testing

  

type unclear

  

type: bug

Anything that doesn't work as advertised

  

type: deliverable

  

type: key result

  

type: objective

  

type: task

  

type: user story

  

user experience

No labels

0 points

0.5 points

1 point

13 points

2 points

21 points

3 points

34 points

5 points

55 points

8 points

ambition

application-offering

ambition

configure-applications

ambition

front-end

ambition/install-applications

ambition

security

ambition

switch-host

ambition

update-applications

ambition

user-management

api service

blocked

component: fediversity panel

component: nixops4

documentation

estimation high: >3d

estimation low: <2h

estimation mid: <8h

infinite points

productisation

project-management

question

role: application developer

role: application operator

role: hosting provider

role: maintainer

security

technical debt

testing

type unclear

type: bug

type: deliverable

type: key result

type: objective

type: task

type: user story

user experience

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

fediversity/fediversity!910

No description provided.