SilverSight/scripts/configure_homarr_oidc.py
allaun 2bc7629bf9 fix: revert Homarr to credentials auth only
SSO is handled by Authentik outpost on racknerd Caddy at
auth.researchstack.info. Homarr sits behind this outpost and
only sees already-authenticated traffic from the public URL.
Direct access via tailnet port 7575 uses credentials.
2026-06-30 05:28:50 -05:00

20 lines
574 B
Python

#!/usr/bin/env python3
"""Restore Homarr auth to credentials-only. SSO is handled at the Caddy/Authentik outpost level."""
import sqlite3, json
conn = sqlite3.connect("/home/allaun/.local/share/containers/storage/volumes/homarr-data/_data/db/db.sqlite")
auth_config = {
"json": {
"providers": ["credentials"],
}
}
conn.execute(
"UPDATE serverSetting SET value = ? WHERE setting_key = ?",
(json.dumps(auth_config), "authentication"),
)
conn.commit()
print("Restored credentials-only auth. SSO is handled by Caddy/Authentik outpost.")
conn.close()