feat(updates): add Authelia-backed markdown editor

Product news is written at /admin behind Traefik forward-auth, while
the public JSON and RSS feeds stay unauthenticated.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jan Wagner
2026-08-16 11:27:09 +02:00
co-authored by Cursor
parent 0482b780f4
commit 7e8313c96e
5 changed files with 306 additions and 4 deletions
+11
View File
@@ -58,11 +58,22 @@ services:
- "traefik.enable=true"
- "traefik.docker.network=proxy"
- "traefik.http.routers.w-make-updates.rule=Host(`updates.w-make.com`)"
- "traefik.http.routers.w-make-updates.priority=10"
- "traefik.http.routers.w-make-updates.entrypoints=websecure"
- "traefik.http.routers.w-make-updates.tls=true"
- "traefik.http.routers.w-make-updates.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-updates.middlewares=default@file,crowdsec-bouncer-plugin@file"
- "traefik.http.services.w-make-updates.loadbalancer.server.port=8080"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.address=http://authelia:9091/api/verify?rd=https://auth.w-make.com"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.trustForwardHeader=true"
- "traefik.http.middlewares.wmake-updates-authelia.forwardauth.authResponseHeaders=Remote-User,Remote-Groups"
- "traefik.http.routers.w-make-updates-admin.rule=Host(`updates.w-make.com`) && (PathPrefix(`/admin`) || PathPrefix(`/v1/admin`))"
- "traefik.http.routers.w-make-updates-admin.priority=200"
- "traefik.http.routers.w-make-updates-admin.entrypoints=websecure"
- "traefik.http.routers.w-make-updates-admin.tls=true"
- "traefik.http.routers.w-make-updates-admin.tls.certresolver=http_resolver"
- "traefik.http.routers.w-make-updates-admin.middlewares=default@file,crowdsec-bouncer-plugin@file,wmake-updates-authelia@docker"
- "traefik.http.routers.w-make-updates-admin.service=w-make-updates"
networks:
- proxy