Replace Authelia with pocket-id - #138

Merged

stackptr merged 39 commits into

mainfrom

Oct 15, 2025

Commits on Oct 14, 2025

Setup test host
stackptr
committed
4e5ebcf
Enable pocket-id service
stackptr
committed
0515d91
Use pocketid postgres database
stackptr
committed
b59bb32
Ensure start-ordering
stackptr
committed
54c10e9
Supply stable encryption key
stackptr
committed
4ca055f
Use oauth2-proxy for single shared SSO
stackptr
committed
9021871
Move test vhost
stackptr
committed
ad6a33f
Use oauth2-proxy in test page
stackptr
committed
390a556
Update `authHost`
stackptr
committed
c78f861
Set content type
stackptr
committed
d31ebfe
Set headers in oauth2
stackptr
committed
de9d60f
Update error_page directive
stackptr
committed
a9c33ee
Use named location for redirect
stackptr
committed
4d13fac
Update `email.domains`
stackptr
committed
6c91865
Update test page HTML
stackptr
committed
1861fe1
Do not rewrite 403
stackptr
committed
9208aff

Commits on Oct 15, 2025

Set `nginx.domain`
stackptr
committed
9d395f1
Use `whitelist-domain`
stackptr
committed
da576dc
Auth any email domain
stackptr
committed
5621b56
Try allowing unverified emails
stackptr
committed
fda872c
Remove exact-match
stackptr
committed
cc10c19
Fix typo
stackptr
committed
51a75d2
Use `X-Forwarded-Proto`
stackptr
committed
51e0c18
Set subrequest with no body
stackptr
committed
5e29191
Try removing `return 200 ...`
stackptr
committed
589fe9f
Try internal named location
stackptr
committed
7123432
Use `rewrite` directive
stackptr
committed
ba30907
Use `root` with static site from store
stackptr
committed
ba531da
Extract config into `rc.web.auth` module
stackptr
committed
e93b803
Wrap module logic in `mkMerge`
stackptr
committed
d75579d
Warn when `requireAuth` set with auth not enabled
stackptr
committed
8e4ca35
Move auth_request into vhost option
stackptr
committed
c020855
Switch to `rc.web.auth` for hosts
stackptr
committed
b7b7ea5
Remove test vhost
stackptr
committed
80efe57
Move module to `services/web/auth.nix`
stackptr
committed
6e1f168
Update paths
stackptr
committed
4c9a18a
Remove Authelia
stackptr
committed
335ab98
Remove TODO
stackptr
committed
f24e256
Depend on `network-online.target`
stackptr
committed
418172c