From 2c60e54c80dc5564ead9c92be9d66607f97eadff Mon Sep 17 00:00:00 2001 From: Eduardo Figueroa Date: Fri, 12 Dec 2025 23:17:23 +0000 Subject: [PATCH] refactor(services): Remove Tinyauth middleware from all services Remove Tinyauth SSO middleware references from: - FreshRSS, Backrest, Booklore, Code Server - Homarr, Homepage, Karakeep, Komodo - MicroBin, RSS Bridge, RSSHub, Static Sites Services with local-only middleware now only use local-only restriction (Backrest, Code Server) without Tinyauth. --- compose/services/FreshRSS/compose.yaml | 1 - compose/services/backrest/compose.yaml | 2 +- compose/services/booklore/compose.yaml | 1 - compose/services/code-server/compose.yaml | 2 +- compose/services/homarr/compose.yaml | 1 - compose/services/homepage/compose.yaml | 1 - compose/services/karakeep/compose.yaml | 1 - compose/services/komodo/compose.yaml | 1 - compose/services/microbin/compose.yaml | 1 - compose/services/rss-bridge/compose.yaml | 1 - compose/services/rsshub/compose.yaml | 1 - compose/services/static-sites/compose.yaml | 1 - 12 files changed, 2 insertions(+), 12 deletions(-) diff --git a/compose/services/FreshRSS/compose.yaml b/compose/services/FreshRSS/compose.yaml index 361d48c..6386d20 100644 --- a/compose/services/FreshRSS/compose.yaml +++ b/compose/services/FreshRSS/compose.yaml @@ -29,7 +29,6 @@ services: traefik.http.services.freshrss.loadbalancer.passhostheader: true # SSO Protection removed - using FreshRSS built-in auth - # traefik.http.routers.freshrss.middlewares: tinyauth # Homarr Discovery homarr.name: FreshRSS diff --git a/compose/services/backrest/compose.yaml b/compose/services/backrest/compose.yaml index 310897f..ae4c28b 100644 --- a/compose/services/backrest/compose.yaml +++ b/compose/services/backrest/compose.yaml @@ -27,7 +27,7 @@ services: traefik.http.services.backrest.loadbalancer.server.port: 9898 # Require authentication and restrict to local network - traefik.http.routers.backrest.middlewares: tinyauth,local-only + traefik.http.routers.backrest.middlewares: local-only # Homarr Discovery homarr.name: Backrest Backup diff --git a/compose/services/booklore/compose.yaml b/compose/services/booklore/compose.yaml index 2ac9420..cdddf51 100644 --- a/compose/services/booklore/compose.yaml +++ b/compose/services/booklore/compose.yaml @@ -28,7 +28,6 @@ services: traefik.http.services.booklore.loadbalancer.server.port: 3000 # SSO Protection - traefik.http.routers.booklore.middlewares: tinyauth # Homarr Discovery homarr.name: Booklore diff --git a/compose/services/code-server/compose.yaml b/compose/services/code-server/compose.yaml index c6ef337..a2ce824 100644 --- a/compose/services/code-server/compose.yaml +++ b/compose/services/code-server/compose.yaml @@ -30,7 +30,7 @@ services: traefik.http.services.code-server.loadbalancer.server.port: 8443 # SSO Protection and restrict to local network - traefik.http.routers.code-server.middlewares: tinyauth,local-only + traefik.http.routers.code-server.middlewares: local-only # Homarr Discovery homarr.name: Code Server (IDE) diff --git a/compose/services/homarr/compose.yaml b/compose/services/homarr/compose.yaml index a12b203..1c861d1 100644 --- a/compose/services/homarr/compose.yaml +++ b/compose/services/homarr/compose.yaml @@ -32,7 +32,6 @@ services: traefik.http.services.homarr.loadbalancer.server.port: 7575 # Optional: SSO Protection (disabled for dashboard access) - # traefik.http.routers.homarr.middlewares: tinyauth networks: homelab: diff --git a/compose/services/homepage/compose.yaml b/compose/services/homepage/compose.yaml index 7c619a6..023a756 100644 --- a/compose/services/homepage/compose.yaml +++ b/compose/services/homepage/compose.yaml @@ -30,7 +30,6 @@ services: traefik.http.services.homepage.loadbalancer.server.port: 3000 # Optional: SSO Protection (disabled for easy dashboard access) - # traefik.http.routers.homepage.middlewares: tinyauth networks: homelab: diff --git a/compose/services/karakeep/compose.yaml b/compose/services/karakeep/compose.yaml index de398c6..a183c7e 100644 --- a/compose/services/karakeep/compose.yaml +++ b/compose/services/karakeep/compose.yaml @@ -34,7 +34,6 @@ services: traefik.http.services.karakeep.loadbalancer.server.port: 3000 # SSO Protection - traefik.http.routers.karakeep.middlewares: tinyauth # Homarr Discovery homarr.name: Karakeep (Bookmarks) diff --git a/compose/services/komodo/compose.yaml b/compose/services/komodo/compose.yaml index fdb9e2a..c2b7a70 100644 --- a/compose/services/komodo/compose.yaml +++ b/compose/services/komodo/compose.yaml @@ -82,7 +82,6 @@ services: traefik.http.services.komodo.loadbalancer.server.port: 9120 # Optional: SSO Protection - # traefik.http.routers.komodo.middlewares: tinyauth komodo-periphery: container_name: komodo-periphery diff --git a/compose/services/microbin/compose.yaml b/compose/services/microbin/compose.yaml index 0962b70..95881e6 100644 --- a/compose/services/microbin/compose.yaml +++ b/compose/services/microbin/compose.yaml @@ -28,7 +28,6 @@ services: traefik.http.services.microbin.loadbalancer.server.port: 8080 # Note: MicroBin has its own auth, SSO disabled by default - # traefik.http.routers.microbin.middlewares: tinyauth # Homarr Discovery homarr.name: MicroBin diff --git a/compose/services/rss-bridge/compose.yaml b/compose/services/rss-bridge/compose.yaml index 83196bc..7ec6db3 100644 --- a/compose/services/rss-bridge/compose.yaml +++ b/compose/services/rss-bridge/compose.yaml @@ -22,7 +22,6 @@ services: traefik.http.services.rss-bridge.loadbalancer.server.port: 80 # SSO Protection (disabled so feeds can be accessed by RSS readers) - # traefik.http.routers.rss-bridge.middlewares: tinyauth # Homarr Discovery homarr.name: RSS Bridge diff --git a/compose/services/rsshub/compose.yaml b/compose/services/rsshub/compose.yaml index b131437..84262f5 100644 --- a/compose/services/rsshub/compose.yaml +++ b/compose/services/rsshub/compose.yaml @@ -29,7 +29,6 @@ services: traefik.http.services.rsshub.loadbalancer.server.port: 1200 # Note: RSSHub is public by design, SSO disabled - # traefik.http.routers.rsshub.middlewares: tinyauth # Homarr Discovery homarr.name: RSSHub diff --git a/compose/services/static-sites/compose.yaml b/compose/services/static-sites/compose.yaml index 88cce29..be257b8 100644 --- a/compose/services/static-sites/compose.yaml +++ b/compose/services/static-sites/compose.yaml @@ -43,7 +43,6 @@ services: traefik.http.routers.figgy-main.entrypoints: websecure traefik.http.routers.figgy-main.tls.certresolver: letsencrypt traefik.http.routers.figgy-main.service: caddy-static - traefik.http.routers.figgy-main.middlewares: tinyauth # SSO protected - experimental/private content # Service definition (single backend for all routes)