77d111f5fc
The Phase 4 audit pass missed this site because the previous agent scoped out owntracks (it overrides the factory's middleware list via extra_annotations to use its own basic-auth middleware). Adding the explicit auth = "none" satisfies Phase 5's "every ingress has an explicit decision" goal and makes the intent visible — mobile OwnTracks clients post location data via HTTP basic-auth and can't follow Authentik forward-auth 302s. Closes the loop on Phase 5: 122/122 active ingress_factory call sites now carry an explicit auth = "..." decision (zero callers rely on the default). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| .terraform.lock.hcl | ||
| backend.tf | ||
| dawarich-hook.lua | ||
| main.tf | ||
| providers.tf | ||
| secrets | ||
| terragrunt.hcl | ||