The_miro
/
Dotfiles
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Dotfiles/setup/modules/FreeipaAnsible/image
History
Amir Alexander Abdelbaki 4730f89e82 feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 
Adds a deliberate extra sign-in layer covering the entire nginx gateway
(portal page + every proxied web UI) via a shared htpasswd credential
generated on the FreeIPA container and published to nginx through a new
portal-auth volume. FreeIPA, CheckMK and Keycloak still each enforce their
own login behind it — two prompts beats one attacker who only had to beat
one lock. Healthcheck updated to treat 401 as healthy accordingly.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 		2026-07-22 16:08:10 +02:00
..
nginx feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
.env.example feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
.gitignore feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
Dockerfile feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
ansipa-checkmk-setup.sh refactor(ansipa): dev_security-scan → dev_mon_clamscan, report to CheckMK; drop SMB scan pipeline 2026-07-02 13:49:18 +02:00
ansipa-checkmk.service feat(ansipa): integrate CheckMK CE monitoring 2026-07-01 18:32:28 +02:00
ansipa-git-add-deploy-key.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-server-setup.sh feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-git-sshd.service feat(freeipa-ansible): git-based signed policy distribution for ANSIPA 2026-07-22 15:56:19 +02:00
ansipa-infra-checkmk-install.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-pbs-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-portal-auth-setup.sh feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
ansipa-portal-auth.service feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
ansipa-pve-monitor.sh feat(freeipa-ansible): add CheckMK monitoring for Proxmox VE + PBS 2026-07-20 11:31:03 +02:00
ansipa-smb-setup.sh refactor(ansipa): dev_security-scan → dev_mon_clamscan, report to CheckMK; drop SMB scan pipeline 2026-07-02 13:49:18 +02:00
ansipa-smb.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
docker-compose.yml feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
docker-env.service feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00
ipa-first-boot.service fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
ipa-first-boot.sh fix(ansipa): full end-to-end test + multiple bug fixes 2026-07-01 10:30:06 +02:00
keycloak-configure.sh setup: add FreeIPA image builder and Keycloak integration 2026-05-18 11:22:48 +02:00
run.sh feat(freeipa-ansible): gateway-wide Basic Auth in front of the ansipa portal 2026-07-22 16:08:10 +02:00