infra/stacks/authentik
Viktor Barzin 6ba60cbb2d
All checks were successful
ci/woodpecker/push/default Pipeline was successful
authentik: repoint to overlay patch2 (SFE for old Safari) + docs
global.image -> 2026.2.4-patch2 (adds the compat_needs_sfe SFE patch on top of the
SLOW-1a query patch). Old Safari/WebKit (<=16.3) now gets authentik's no-JS SFE
login instead of a blank page — fixes emo's iPadOS-15.8 iPad with no auth
downgrade. Docs: .claude/CLAUDE.md Authentik row + docs/architecture/authentication.md.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-28 11:39:29 +00:00
..
modules/authentik authentik: repoint to overlay patch2 (SFE for old Safari) + docs 2026-06-28 11:39:29 +00:00
admin-services-restriction.tf authentik: lock chrome.viktorbarzin.me noVNC to Viktor only 2026-06-22 18:09:27 +00:00
authentik_provider.tf fix(authentik): long-lived social-login sessions + shield auth from CrowdSec lockout 2026-06-20 23:40:22 +00:00
Dockerfile authentik overlay: serve the no-JS SFE login to old Safari (patch #2) 2026-06-28 11:38:05 +00:00
email-secret.tf ESO: add force_conflicts to all ExternalSecret manifests (fleet sweep) 2026-06-25 21:28:11 +00:00
guest.tf traefik/crowdsec: remove dead Yaegi-plugin middleware reference (PR1/2) 2026-06-21 00:15:12 +00:00
main.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
patch-compat-sfe.py authentik overlay: serve the no-JS SFE login to old Safari (patch #2) 2026-06-28 11:38:05 +00:00
secrets fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
t3-users.tf fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
terragrunt.hcl fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00
vault-authz-binding.tf fix(authentik): pin Vault binding UUIDs as literals (provider has no authentik_application data source) 2026-06-15 22:01:29 +00:00