gm/server-infra
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: record HOBBY DNA admin OIDC provider and participant auth split

Browse Source 
PK 19 (hobbydna-oidc) is admin-only; participants use direct Google/
Kakao/Naver OAuth, no Authentik broker. Notes the now-deleted PK 20
(hobbydna-user-oidc) that was briefly used for the broker approach.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RbVxsidKDGXubonbsy4yZ7
This commit is contained in:
Codex
2026-08-23 00:26:28 +09:00
parent 5b89b1046f
commit ff13c82a12
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/sso.md
View File

@@ -15,8 +15,12 @@
| 7 | `filebrowser-proxy` | Proxy | FileBrowser | | 7 | `filebrowser-proxy` | Proxy | FileBrowser |
| 8 | `comfyui-proxy` | Proxy | ComfyUI | | 8 | `comfyui-proxy` | Proxy | ComfyUI |
| 9 | `wikijs-provider` | OAuth2/OIDC | Wiki.js | | 9 | `wikijs-provider` | OAuth2/OIDC | Wiki.js |
| 11 | `reservation-oidc` | OAuth2/OIDC | Reservation App |
| 19 | `hobbydna-oidc` | OAuth2/OIDC | HOBBY DNA 관리자 페이지 |
| — | `reminder` | OAuth2/OIDC | Telegram Reminder Bot 관리자 UI | | — | `reminder` | OAuth2/OIDC | Telegram Reminder Bot 관리자 UI |
HOBBY DNA는 **관리자만** Authentik(PK 19)을 쓴다. 참여자(일반 사용자) 로그인은 Authentik을 거치지 않고 구글/카카오/네이버와 앱이 직접 OAuth로 통신한다 — 자세한 내용은 `/root/hobbydna-app/docs/podman-service-hobbydna.md` 7-1절 참고. (한때 `hobbydna-user-oidc`, PK 20으로 Authentik 브로커 방식을 썼으나 이 구조로 바뀌면서 삭제됨.)
## OIDC 연동 상세 ## OIDC 연동 상세
### Grafana (`grafana.ini`) ### Grafana (`grafana.ini`)