chaib/atlas-os
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: desktop now behind Authentik SSO (forward_auth), not basic_auth

Browse source
This commit is contained in:
Chaib Aarab 2026-06-22 21:03:04 +02:00
parent 449133f470
commit 89e61c91f3
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
docs/remote-desktop.md
View file

@ -13,15 +13,15 @@ flow works normally. Open the terminal, run `claude`, log in through Chromium. D
## Stack ## Stack
- **Image:** lscr.io/linuxserver/webtop:ubuntu-xfce (Selkies/WebRTC) - **Image:** lscr.io/linuxserver/webtop:ubuntu-xfce (Selkies/WebRTC)
- **Bind:** 127.0.0.1:8131 (loopback only — never exposed directly) - **Bind:** 127.0.0.1:8131 (loopback only — never exposed directly)
- **Edge:** Caddy reverse_proxy + basic_auth (TLS via Let's Encrypt) - **Edge:** Caddy reverse_proxy + Authentik forward_auth (your atlasshb identity)
- **Persistence:** /opt/atlas/webtop/config (home survives restarts) - **Persistence:** /opt/atlas/webtop/config (home survives restarts)
- **Pre-installed:** Claude Code CLI (on PATH), Chromium, XFCE terminal; - **Pre-installed:** Claude Code CLI (on PATH), Chromium, XFCE terminal;
desktop launchers for Claude + Chromium desktop launchers for Claude + Chromium
## Compose ## Compose
See `deploy/webtop-docker-compose.yml`. Credentials live in a local `.env` See `deploy/webtop-docker-compose.yml`. Auth is your Authentik identity (no separate password). Old basic_auth creds in a local `.env`
(gitignored) and the Caddy basic_auth hash — never committed. (gitignored) and the Caddy basic_auth hash — never committed.
## Roadmap ## Roadmap
- Migrate edge auth from Caddy basic_auth to Authentik SSO (consistent identity) - DONE: edge auth is Authentik SSO (atlasshb identity)
- Optional: pin Claude to the Max subscription via the in-desktop browser login - Optional: pin Claude to the Max subscription via the in-desktop browser login