[{"_1":2,"_161":-5,"_162":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_140":141},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":21,"_132":11,"_133":-5,"_134":11,"_135":-5,"_136":137,"_138":91,"_139":-7},"canonicalUrl","https://hub.docker.com/r/paulritter/tinytinyrss/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","paulritter","reponame","tinytinyrss","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2019-07-19T12:26:36.897553Z","description","TinTinyRSS with Remote Authentication Modules","is_private","last_updated","2021-02-19T07:42:33.12226Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",306,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# TinyTinyRSS\nDockerized TinyTinyRSS with mod_mellon and mod_ldap for remote auth\n\n## What is in here?\nThe main goal is to use TinyTinyRSS with remote authentication. This image thus comes with the following installed:\n- mod_mellon: SAML-based authentication\n- mod_authnz_ldap: LDAP-based authentication\n- ssmtp: To send e-mails from TinyTinyRSS\n- Hardened Apache Config (ServerTokens, ServerSignature, Indexes disabled)\n\n## How to configure\nThe relevant configuration files have to be mounted to `/etc/apache2/site-config` inside the container.\n### You want to use basic auth\nProvide `mellon.conf` with the follwing content:\n\n ServerName YOUR_URL_GOES_HERE\n \n AuthType Basic\n AuthName \"Authentication Required\"\n AuthUserFile \"/etc/apache2/site-config/.htpasswd\"\n Require valid-user\n \n\nOf course, you need to provide a pregenerated `.htpasswd` as well.\n\n### You have a reverse proxy handling authentication\nProvide `mellon.conf` in a way that adds a Header to the Request. For example, if you are using traefik:\n\n ServerName YOUR_CONTAINER_IP\n \n SetEnvIf X-Webauth-User ^(.*)$ LOGINNAME=$1\n RequestHeader add PHP_AUTH_USER %{LOGINNAME}e\n \n\n### You want to use a SAML IdP\nYou don't have to provide a config file, but keys must be generated first (or provided).\n\nThe keys go to: `/etc/apache2/saml/` inside the container. You have to provide `/etc/apache2/saml/mellon_metadata.xml`, `/etc/apache2/saml/mellon.key`, `/etc/apache2/saml/mellon.crt` and `/etc/apache2/saml/idp_metadata.xml`.\n\nYou can use pregenerated keys or use the script inside the container with:\n\n docker run -it paulritter/tinytinyrss /opt/firstrun.sh FQDN_OF_YOUR_INSTALLATION\n\nIt outputs the generated files for you and stores them in a volume.\n\nYou can then generate your `idp_metadata.xml`. For example, if you are using Keycloak, you can use this Guide https://www.keycloak.org/docs/latest/securing_apps/index.html#_mod_auth_mellon\n### You want to use LDAP\nProvide a file called `ldap.conf` in `/etc/apache2/site-config` with the relevant settings. This example uses the public demo of FreeIPA\n\n ServerName YOUR_URL_GOES_HERE\n \n SetHandler ldap-status\n\n AuthType Basic\n AuthName \"LDAP Protected\"\n AuthBasicProvider ldap\n AuthLDAPInitialBindAsUser on\n AuthLDAPInitialBindPattern (.+) uid=$1,cn=users,cn=accounts,dc=demo1,dc=freeipa,dc=org\n \n AuthLDAPUrl \"ldap://ipa.demo1.freeipa.org/cn=users,cn=accounts,dc=demo1,dc=freeipa,dc=org?uid,displayName,mail??(memberOf=cn=employees,cn=groups,cn=accounts,dc=demo1,dc=freeipa,dc=org)\"\n\n Require valid-user\n \n \n AuthType Basic\n AuthName \"LDAP Protected\"\n AuthBasicProvider ldap\n AuthLDAPInitialBindAsUser on\n AuthLDAPInitialBindPattern (.+) uid=$1,cn=users,cn=accounts,dc=demo1,dc=freeipa,dc=org\n \n AuthLDAPUrl \"ldap://ipa.demo1.freeipa.org/cn=users,cn=accounts,dc=demo1,dc=freeipa,dc=org?uid,displayName,mail??(memberOf=cn=employees,cn=groups,cn=accounts,dc=demo1,dc=freeipa,dc=org)\"\n\n Require valid-user\n \n\nProvide `mellon.conf` as follows:\n\n ServerName 127.0.0.1\n \n RequestHeader add PHP_AUTH_USER YOUR_DESIRED_USERNAME\n \n\n### Configure SSMTP\nThe ssmtp configuration goes in `/etc/ssmtp` inside the container.\n\n## Installation\nStart your container with any of the configuration options above. For example:\n\n docker run -it -p 80:80 -v /etc/timezone:/etc/timezone:ro \\\n -v /etc/localtime:/etc/localtime:ro \\\n -v /srv/ssmtp:/etc/ssmtp \\\n -v /srv/ttrss:/etc/apache2/site-config \\\n paulritter/tinytinyrss:latest\n\nNavigate to `http://YOUR_URL/install` and configure your instance.\n\nSave the configuration file, terminate the container and provide the file to the container on next startup.\n\n docker run -d -p 80:80 -v /etc/timezone:/etc/timezone:ro \\\n -v /etc/localtime:/etc/localtime:ro \\\n -v /srv/ssmtp:/etc/ssmtp \\\n -v /srv/ttrss:/etc/apache2/site-config \\\n -v /srv/ttrss/config.php:/var/www/html/config.php \\\n paulritter/tinytinyrss:latest\n \nLog in using the default credentials `admin` and `password` and change your admin password. DO NOT CLOSE YOUR BROWSER!\n\nChange the line defining the Plugins for TinyTinyRSS in `config.php` like so:\n\n`define('PLUGINS', 'auth_remote, note');`\n\nRestart your container with the modified `config.php`. Open another browser or a private tab in your first browser session and login using your remote source. The user should now show up in the browser running the admin session and can be granted administrative rights. You may now close the first browser session.\n\n## Updating feeds\n### Using the updater sidecar\n docker run -d -v /etc/timezone:/etc/timezone:ro \\\n -v /etc/localtime:/etc/localtime:ro \\\n -v /srv/ttrss/config.php:/usr/src/ttrss/config.php:ro \\\n paulritter/tinytinyrss-updater:latest\n\n### Using the simple update mode\nAlso, you can enable simple update mode where tt-rss will try to periodically update feeds while it is open in your web browser. Obviously, no updates will happen when tt-rss is not open or your computer is not running.\n\nTo enable this mode, set constant `SIMPLE_UPDATE_MODE` to true in `config.php`.\n\nNote that only main tt-rss UI supports this, if you have digest or mobile open or use an API client (for example, android application), feeds are not going to be updated. You absolutely have to have tt-rss open in a browser tab on a running computer somewhere.\n","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":21,"_83":11,"_84":11},"read","write","admin","user","storage_size",529060823,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},"content_type","creator",3048681,"full_size",168190462,"id",63091198,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},"architecture","amd64","digest","sha256:aa9f27f262e783d012be455dc5b091a178e72d848677bee6eebd254286f7e4fa","features","","last_pulled","2026-10-12T18:46:03.329434821Z","last_pushed","2020-04-22T09:30:34Z","os","linux","os_features","os_version","size","variant","2021-02-19T07:42:32.785468Z","last_updater","last_updater_username","media_type","latest","repository",7429496,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":142,"_149":150,"_136":159,"_160":11},{"_40":143,"_42":144,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":145,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":146,"_79":11,"_80":148,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":147},[78],{"_82":21,"_83":11,"_84":11},"tags",{"_151":64,"_152":-5,"_153":-5,"_154":155},"count","next","previous","results",[156],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":157,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":21},[158],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},[],"canDeleteTags","actionData","errors"]

paulritter/tinytinyrss

Tags for paulritter/tinytinyrss