rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

pelican: gate panel behind Authelia, bypass /api/remote/ for wings

Browse source 
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
rope 2026-08-09 12:00:43 +01:00
parent 00ec9a9759
commit 475d394810
3 changed files with 33 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

5
services/pelican.nix
View file

@ -15,6 +15,11 @@
# UI and stored in the panel's SQLite DB. Back up /var/lib/pelican-panel and
# /var/lib/pelican (server files); the nix side here is only the plumbing.
#
# AUTH: panel.nordhammer.it sits behind Authelia (see nginx.nix), except
# /api/remote/ which wings needs. Pelican has no switch to disable its own
# login, so its account is a second, redundant gate — replacing it means
# standing up Authelia's OIDC provider and pointing Pelican's Socialite at it.
#
# FIRST-RUN (wings crash-loops until step 3 — that's expected):
# 1. https://panel.nordhammer.it → installer wizard, make admin user.
# 2. Admin → Nodes → Create. FQDN node.nordhammer.it, SSL *on*, port 443