Amir Alexander Abdelbaki 4730f89e82 feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal ... Adds a deliberate extra sign-in layer covering the entire nginx gateway (portal page + every proxied web UI) via a shared htpasswd credential generated on the FreeIPA container and published to nginx through a new portal-auth volume. FreeIPA, CheckMK and Keycloak still each enforce their own login behind it — two prompts beats one attacker who only had to beat one lock. Healthcheck updated to treat 401 as healthy accordingly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-07-22 16:08:10 +02:00
..
Desktop-Environments	chore: mark sway.sh install module executable	2026-07-21 20:52:32 +02:00
FreeipaAnsible	feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal	2026-07-22 16:08:10 +02:00
lib	fix(flatpak): apply QT_QPA_PLATFORMTHEME override alongside GTK_THEME	2026-07-10 16:23:49 +02:00
optional-Modules/apps	feat(greeter): cyberqueer ReGreet theme + wire greetd into installers	2026-07-04 13:37:30 +02:00
core-packages.sh	fix(core-packages): make PipeWire the jack/pulse provider to avoid DE conflict	2026-06-27 13:25:49 +02:00
core.sh	feat(archiso): support fully bare Arch installs and fix greetd/DM conflicts	2026-07-13 12:08:13 +02:00
package-managers.sh	chore: add inline comments across all modules and configs	2026-06-25 13:07:06 +02:00
shell-setup.sh	fix(installer): flush stray tty input, split shell rc's from shell setup	2026-07-03 14:22:03 +02:00