msjpq/simple-traefik-identity
Simple & Configurable -- SSO, for Traefik.
Image
0
100K+
msjpq/simple-traefik-identity repository overview
ā Simple Traefik Identityā
Simple & Configurable -- SSO, for Traefik.
ā Preview
ā Logon
ā Logoff
(if not authorized, you can login via another account)
ā Features
ā Role Based Access Control (RBAC)
groups:
- name: quebec
sub_domains:
- "*"
- name: saskatchewan
sub_domains:
- canada.ca
- www.tourismnewbrunswick.ca
- name: newfoundland
sub_domains:
- www.gov.nu.ca
users:
- name: yukon
password: yukon
session: 0.5 # logs you out after half a day
groups:
- quebec
- name: nunavut
password: nunavut
groups:
- saskatchewan
- newfoundland
ā Rate Limit
rate_limit:
headers:
- Cf-Connecting-Ip
- Another-Header
- So-on
rate: 5
timer: 30
ā Custom UI
display:
title: Simple Traefik Identity
background: |-
https://github.com/ms-jpq/simple-traefik-identity/raw/xp/src/views/assets/xp.jpg
ā Usage
See minimalā and maximalā to get started.
sti:
image: msjpq/simple-traefik-identity
container_name: sti
labels:
- traefik.http.services.sti.loadbalancer.server.port=5050
- traefik.http.middlewares.auth.forwardauth.address=http://sti:5050
- traefik.http.middlewares.auth.forwardauth.authResponseHeaders=X-Forwarded-User
volumes:
- ./config/conf.yml:/sti/config/conf.yml
ā Security
š©āš» -------- Request --------> š®āāļø
š©āš» <---- Auth Challenge ----- š®āāļø
š©āš» ------ Credentials ------> š®āāļø
š©āš» <-- Samesite JWT Cookie -- š®āāļø
š©āš» -- Samesite JWT Cookie --> š®āāļø
š©āš» <---------- OK ----------- š®āāļø
š©āš» -- Samesite JWT Cookie --> š®āāļø
š©āš» <---------- OK ----------- š®āāļø
JWT payload only contain list of accessible domains
ā Sister
Check out my sister: Simple Traefik Dashā
Zero conf service dashboard for Traefik v2
Tag summary
Content type
Image
Digest
sha256:435bb63e8ā¦
Size
46.6 MB
Last updated
about 2 years ago
docker pull msjpq/simple-traefik-identity