tree 64cf73da6abcdf295404a76f7172151cd1a11c1b
parent d7744a6874c4eceeabf5011a18e68430725eed4d
author Giorgi Lekveishvili <giolekva@gmail.com> 1710935790 +0400
committer GitHub <noreply@github.com> 1710935790 +0400
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsFcBAABCAAQBQJl+s7uCRC1aQ7uu5UhlAAAm40QAF+PoGYRzOuNy4Pxn/oVwTNu
 kPcYA+ZU1pHwEL+pwm36DD9oFJKXSVMJTDT3xgKeCC/ZA8erex5xG1gjYjzB32hc
 zR4iiQvQQ+i+/9F5W102+EN/MMnuF/2J0LN/z+kV32mb/17pUQe/ReFSzqik9xIh
 ighZxcTHsygxfW0B4ly2/2xY3EeUbRt3out1SuyzH173OmIblR95rB+VhY+bNhe+
 tUu0c4ZRvsISnxR2G/T/stj7YyQuzkFBKuxkAmDps9xBfAJ+TTWw8HZjigGCFX3L
 iqwBKBkeJJnhvkGrIeXmPV3vDZdOAMoobko4qwMIia2wu/hOTHPEhlKwW1OSmlSB
 RqRU48uVHdbXZt168dGv/hs0qeNP8RPXRSS1zbQHVPD22PwjTfmQ6g6g52Ez8xfp
 VJ2LAAKHyICoSWPI4RnMiWmT+FiLWRO7J96lmc23SB/YaRR8WuuWglvCY0WGkQwN
 gHF/LI9UWhMw554wNiRrKQQDsBz34n+z27l1j138NML+lHjUYoFf4nRP2OuMXobR
 BMmhBEu1c+Eq8bihLEOtz34D7Irl9d6Twyz4UZ0rvoXOxK0DZuuLn7nzzTJGXhO2
 cOXnJUHBbEUJCxTPJVRFXjK8USHryebNTHQ6NtqKVGBXv/VgvGFovrH0GTVUYaID
 rVk2rTNUyMCvIAxm8DBf
 =i+6R
 -----END PGP SIGNATURE-----
 

auth-proxy: proxies only authenticated requests to upstream, redirects to login page otherwise (#103)

* auth-proxy: inspects authenticated user

* ingress: chart and use in rpuppy

* auth-proxy: make it optional in rpuppy

* kratos: whitelist env pub/priv domains for auth return_to addr

* url-shortener: put behind auth-proxy

* pihole: replace oauth2-client with auth-proxy

* auth-proxy: fix upstream uri generation

* pihole: remove old chart using oauth2

* auth-proxy: remove temporary values file

* url-shortener: check x-user header for authentication

* auth: fix allowed_return_urls list

* auth-proxy: fix current address generation logic

---------

Co-authored-by: Giorgi Lekveishvili <lekva@gl-mbp-m1-max.local>