Amir Alexander Abdelbaki 4730f89e82 feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal ... Adds a deliberate extra sign-in layer covering the entire nginx gateway (portal page + every proxied web UI) via a shared htpasswd credential generated on the FreeIPA container and published to nginx through a new portal-auth volume. FreeIPA, CheckMK and Keycloak still each enforce their own login behind it — two prompts beats one attacker who only had to beat one lock. Healthcheck updated to treat 401 as healthy accordingly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-07-22 16:08:10 +02:00
..
ansible	feat(freeipa-ansible): git-based signed policy distribution for ANSIPA	2026-07-22 15:56:19 +02:00
autofs-pkgbuild	fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround	2026-07-02 11:27:46 +02:00
image	feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal	2026-07-22 16:08:10 +02:00
auto-enroll-ansible.sh	Update setup/modules/FreeipaAnsible/auto-enroll-ansible.sh	2026-04-27 16:38:02 +02:00
copilot-explains.txt	Update setup/modules/FreeipaAnsible/copilot-explains.txt	2026-04-27 17:00:37 +02:00
freeipa-client-answerfile.json	setup: add FreeIPA server module and generic client script	2026-05-18 11:12:31 +02:00
freeipa-client.sh	fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround	2026-07-02 11:27:46 +02:00
freeipa-enroll.sh	fix(ansipa): FreeIPA enrollment for Arch/Fedora/RHEL + autofs AUR workaround	2026-07-02 11:27:46 +02:00