diff --git a/identity-provider/docker-compose.yml b/identity-provider/docker-compose.yml index fb1b803..346fb76 100644 --- a/identity-provider/docker-compose.yml +++ b/identity-provider/docker-compose.yml @@ -37,8 +37,11 @@ services: # To start the initial setup, navigate to http://:9000/if/flow/initial-setup/ # TODO: Check whether a authentik proxy is necessary (ghcr.io/goauthentik/proxy). # More infos: + # - https://github.com/brokenscripts/authentik_traefik [very good guide to Authentik behind Traefik!] # - https://helgeklein.com/blog/authentik-authentication-sso-user-management-password-reset-for-home-networks/ - # - + # Alternatives to Authentik: + # - Keycloak https://www.keycloak.org | https://github.com/keycloak/keycloak [by Redhat, scalable solution, extensive features] + # - Authelia https://www.authelia.com/ | https://github.com/authelia/authelia [more easily to deploy and maintain] image: ${AUTHENTIK_IMAGE} restart: unless-stopped depends_on: diff --git a/infrastructure/docker-compose.yml b/infrastructure/docker-compose.yml index 836e317..9a7cb14 100644 --- a/infrastructure/docker-compose.yml +++ b/infrastructure/docker-compose.yml @@ -97,6 +97,7 @@ services: whoami: # A container that exposes an API to show its IP address image: traefik/whoami + restart: always labels: - "traefik.http.routers.whoami.tls=true" - "traefik.http.routers.whoami.rule=Host(`${TRAEFIK_DASHBOARD_DOMAIN}`) || PathPrefix(`/who`)" diff --git a/kanboard/docker-compose.yml b/kanboard/docker-compose.yml index 2fa2acb..f602a99 100644 --- a/kanboard/docker-compose.yml +++ b/kanboard/docker-compose.yml @@ -3,6 +3,8 @@ services: # Project management Kanban-style # default credentials: admin/admin # https://docs.kanboard.org/v1/admin/docker/ + # information for running MariaDB instead of SQLite: https://docs.kanboard.org/v1/admin/docker/ + # plugin for authorization with Authentik: https://github.com/kanboard/plugin-oauth2 image: ${KANBOARD_IMAGE} restart: unless-stopped labels: