29 Commits

Author SHA1 Message Date
Ruben Hensen 20cf119dbd Extend authentik + FreshRSS session lifetimes
Authentik's default-authentication-login stage ships with
session_duration: seconds=0, so the SSO session died with the browser.
New blueprint raises it to 30 days for every app on that flow.

FreshRSS runs OIDC through Apache mod_auth_openidc, whose defaults are a
5 minute inactivity timeout and a ~7.5 hour max duration in a non-persistent
cookie. Bumped to a 30 day sliding inactivity window (refreshed on every
request) with a 90 day hard cap, and made the cookie persistent so it
survives a browser restart.
2026-09-03 15:21:07 +02:00
Ruben Hensen 499cd6826a Add oidc actualbudget 2 2026-04-10 21:32:19 +02:00
Ruben Hensen 068ac20693 Add oidc actualbudget 2026-04-10 21:23:50 +02:00
Ruben Hensen 579e40d2b3 Update port oidc freshrss 2026-04-10 20:59:59 +02:00
Ruben Hensen 428f14efc1 Add oidc freshrss 2026-04-10 20:49:11 +02:00
Ruben Hensen 0fd7bf1135 Add OIDC to argocd 2026-04-06 18:44:32 +02:00
Ruben Hensen faaf6b6729 Remove most hensen.io refs and move from stalwart.rubenhensen.nl to mail.rubenhensen.nl 2026-04-06 18:09:24 +02:00
Ruben Hensen 07c168220b Revert property mapping 2026-04-05 22:48:35 +02:00
Ruben Hensen 91812829c6 Add property mailalias mapping 2026-04-05 22:36:44 +02:00
Ruben Hensen fd12984bba outpost from direct to cached 2026-03-22 14:44:57 +01:00
Ruben Hensen 7a151c0a2d Add mail changes 2026-03-21 23:30:03 +01:00
Ruben Hensen 264ce4c85b update lb outpost 2026-03-21 20:44:17 +01:00
Ruben Hensen ff44035b4c Change from loadbalancer to nodeport 2026-03-21 19:53:38 +01:00
Ruben Hensen bcd0e47076 Connect Stalwart to Authentik LDAP for user authentication
- Add LDAP directory backend in Stalwart pointing to ldap.rubenhensen.nl
- Expose Authentik LDAP outpost externally via LoadBalancer service
- Add ldap.rubenhensen.nl DNS record
2026-03-17 22:12:56 +01:00
Ruben Hensen 20a7b7ab15 add application ldap 2026-03-15 15:22:09 +01:00
Ruben Hensen 65cbe32b6d Add outpost back 2026-03-15 15:17:53 +01:00
Ruben Hensen 1ef2a27919 Just provider 2026-03-15 15:15:28 +01:00
Ruben Hensen b4a0c2db24 Add only ldap provider 2026-03-15 15:14:49 +01:00
Ruben Hensen 3e9b5950e4 Other ldap blueprint 2026-03-15 15:09:44 +01:00
Ruben Hensen ab0293bd64 invalidation flow added 2026-03-15 14:37:19 +01:00
Ruben Hensen 3977722740 Add LDAP outpost, SOGo on K8s, Stalwart OIDC 2026-03-15 14:30:05 +01:00
Ruben Hensen c51c98e821 Add rubenhensen.nl to all ingresses 2026-03-15 11:46:24 +01:00
Ruben Hensen 8e7c0ad9e3 oidc vault config change authentik3 2026-03-15 11:30:00 +01:00
Ruben Hensen 432243829e oidc vault config change authentik2 2026-03-15 11:28:18 +01:00
Ruben Hensen a8c71e1c73 oidc vault config change authentik 2026-03-15 11:25:10 +01:00
Ruben Hensen d4a75824fd oidc vault config change authentik 2026-03-15 11:13:09 +01:00
Ruben Hensen 66d1ba9d13 Add oidc to Vault 2026-03-15 10:50:18 +01:00
Ruben Hensen 4d551d43b0 cnpg with authentik 2026-03-15 00:27:17 +01:00
Ruben Hensen 7a495bb6fd Add authentik 2026-03-15 00:19:31 +01:00