Cloonar/nixos
3
0
Fork 0
Code Issues 40 Pull requests 6 Projects Releases Packages Wiki Activity Actions

feat: move every OIDC client from Keycloak back to Authelia #454

Merged
dominik.polakovics merged 1 commit from feat/oidc-back-to-authelia into main 2026-10-10 13:01:13 +02:00
Conversation 0 Commits 1 Files changed 8 +84 -19
dominik.polakovics commented 2026-10-10 13:01:08 +02:00
Owner
Copy link

Every consumer that was cut over to sso.cloonar.com is repointed at
auth.cloonar.com: Grafana, Immich, Nextcloud, Matrix (MAS), Warpgate,
OneCLI and Paperless. Forgejo and FreeScout carry their IdP settings in
their own databases and are repointed by hand.

Authelia gains the three clients that only ever existed in Keycloak
(onecli, warpgate, paperless) with fresh secrets, a paperless
authorization policy on group:paperless, and FreeScout's regenerated
callback path. Keycloak keeps running untouched as the rollback path
until the Authelia login is proven on every client.

Co-Authored-By: Claude Fable 5.1 noreply@anthropic.com

Every consumer that was cut over to sso.cloonar.com is repointed at auth.cloonar.com: Grafana, Immich, Nextcloud, Matrix (MAS), Warpgate, OneCLI and Paperless. Forgejo and FreeScout carry their IdP settings in their own databases and are repointed by hand. Authelia gains the three clients that only ever existed in Keycloak (onecli, warpgate, paperless) with fresh secrets, a paperless authorization policy on group:paperless, and FreeScout's regenerated callback path. Keycloak keeps running untouched as the rollback path until the Authelia login is proven on every client. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Every consumer that was cut over to sso.cloonar.com is repointed at
auth.cloonar.com: Grafana, Immich, Nextcloud, Matrix (MAS), Warpgate,
OneCLI and Paperless. Forgejo and FreeScout carry their IdP settings in
their own databases and are repointed by hand.

Authelia gains the three clients that only ever existed in Keycloak
(onecli, warpgate, paperless) with fresh secrets, a paperless
authorization policy on group:paperless, and FreeScout's regenerated
callback path. Keycloak keeps running untouched as the rollback path
until the Authelia login is proven on every client.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
dominik.polakovics deleted branch feat/oidc-back-to-authelia 2026-10-10 13:01:13 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
bug

   
enhancement

   
in-progress

   
needs-info

   
needs-triage

   
p0

   
ready-for-agent

   
ready-for-human

   
wontfix
No labels
bug
enhancement
in-progress
needs-info
needs-triage
p0
ready-for-agent
ready-for-human
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Cloonar/nixos!454
No description provided.