viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

state(dbaas): update encrypted state

Browse source
This commit is contained in:
Viktor Barzin 2026-05-10 21:00:00 +00:00
parent 5582977e1a
commit 2db8bdac0d
9 changed files with 1672 additions and 1628 deletions
Download patch file Download diff file Expand all files Collapse all files

10
stacks/onlyoffice/main.tf
View file

@ -249,8 +249,14 @@ resource "kubernetes_service" "onlyoffice" {
}
}
module "ingress" {
source = "../../modules/kubernetes/ingress_factory"
auth = "required"
source = "../../modules/kubernetes/ingress_factory"
# Iframe-loaded by Nextcloud with JWT-signed session tokens; OnlyOffice
# validates the JWT itself. Authentik forward-auth would 302 the iframe
# load if the browser doesn't already have an Authentik cookie, AND
# OnlyOffice's server-to-server callback URLs (Nextcloud → OnlyOffice
# for save events, etc.) run outside any browser session entirely.
# The JWT is the auth gate.
auth = "none"
dns_type = "proxied"
namespace = kubernetes_namespace.onlyoffice.metadata[0].name
name = "onlyoffice"