claudio 7e856d85a6 Gate artifacto admin with Authentik + forward gateway header ...

Inject X-Artifacto-Gateway (shared secret in ARTIFACTO_GATEWAY_SECRET)
so the app can auto-login Authentik-authenticated users while
rejecting spoofed SSO headers from direct-connection peers.

Leaves /p/* (share URLs), /static/*, /healthz public.

2026-04-22 22:20:56 +02:00

3.7 KiB

Raw Blame History

View Raw