Commit graph

2 commits

Author SHA1 Message Date
Kenpat7177
59b9209846 chore: retire BookStack — books hosted on Kavita
BookStack is not being used. All books are managed in Kavita (kavita.kitestacks.com).
- Reverted bookstack/docker-compose.yml to pre-SSO state (no OIDC env vars, no kitestacks network)
- Removed bookstack/.env OIDC secret placeholder
- Updated docs/authentik-sso-setup.md: BookStack removed from SSO scope

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-08 14:53:57 -05:00
Kenpat7177
ea8b426f23 feat: configure Authentik SSO for all kitestacks.com services
- Enable OIDC in Kavita appsettings.json (Authority, ClientId, Enabled)
- Add OIDC env vars to BookStack compose + APP_URL + kitestacks network
- Add OIDC env vars to OpenProject compose + kitestacks network declaration
- Add kitestacks network + error reporting setting to Authentik compose
- Create .env secret placeholders for BookStack and OpenProject
- Add comprehensive SSO setup guide: docs/authentik-sso-setup.md
- Version bump: v1.3.883 → v1.3.884

Services getting native OIDC: Grafana, OpenWebUI, Forgejo, BookStack, OpenProject, Kavita
Services getting proxy auth:  Shaarli, Uptime Kuma, LiteLLM
Excluded: Portainer, Prometheus, Node Exporter, OpenRouter

Manual steps pending: Authentik admin UI app creation, Forgejo OAuth source, Cloudflare tunnel updates.
See docs/authentik-sso-setup.md for the full checklist.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-08 14:42:11 -05:00