Olaf
b428721b07
- Consolidated documentation from Ralph Loop iterations - Archived 20+ outdated/superseded files to .archive/ - Kept essential docs: OIDC integration, mobile setup, quick start - Added operational scripts for health monitoring and backup - Research artifacts preserved in .tasks/artifacts/ Current state: - 3 VPS sites (fry, proton, photon) ONLINE in Pangolin - brn-home site pending for local services (Jellyfin, etc.) - Mobile access configuration pending Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2.5 KiB
2.5 KiB
Pangolin SSO Infrastructure - Quick Start
Status: ✅ Deployed and Running Date: 2026-01-20
🚀 TL;DR - What You Have
Three platforms deployed on brn (10.50.0.74):
| Platform | URL | Status | Action Needed |
|---|---|---|---|
| Authentik | https://sso.obr.sh | ✅ Running | Create admin account |
| Pangolin | https://tunnel.obr.sh | ✅ Running | Use setup token |
| Guacamole | https://remote.obr.sh/guacamole/ | ✅ Running | Change password |
⚡ 5-Minute Quick Start
1. Check Everything is Healthy
/home/olaf/pangolin/scripts/monitor-sso-health.sh
Expected: ✅ ALL SYSTEMS OPERATIONAL
2. Get Pangolin Setup Token
The health script shows the token, or run:
cd /srv/docker/pangolin && sudo docker compose logs pangolin | grep "Token:"
3. Complete Setups (One at a Time)
Pangolin First: (https://tunnel.obr.sh)
- Enter the setup token
- Create admin account
- Done in 30 seconds
Then Authentik: (https://sso.obr.sh/if/flow/initial-setup/)
- Create admin account
- SAVE RECOVERY CODES
- Done in 2 minutes
Then Guacamole: (https://remote.obr.sh/guacamole/)
- Login: guacadmin / guacadmin
- Change password in Settings
- Done in 1 minute
Total time: <5 minutes
📚 Full Documentation
For complete integration (OIDC, service SSO, Pangolin sites):
Read: /home/olaf/pangolin/ADD-OIDC-INTEGRATIONS.md
For detailed deployment info:
Read: /home/olaf/pangolin/DEPLOYMENT-COMPLETE.md
🔧 Useful Commands
Monitor Health:
/home/olaf/pangolin/scripts/monitor-sso-health.sh
Backup Everything:
/home/olaf/pangolin/scripts/backup-sso-infrastructure.sh
View Logs:
cd /srv/docker/authentik && sudo docker compose logs -f server
cd /srv/docker/pangolin && sudo docker compose logs -f pangolin
cd /srv/docker/guacamole && sudo docker compose logs -f guacamole
✅ What's Working
- LAN access (10.50.0.0/24)
- WAN internet routing
- All existing services (Jellyfin, OpenWebUI, etc.)
- All three new SSO platforms
- TLS certificates (automatic)
- Docker networks
- Firewall rules
Zero issues detected.
📞 If You Need Help
Check health first:
/home/olaf/pangolin/scripts/monitor-sso-health.sh
Review deployment:
cat /home/olaf/pangolin/DEPLOYMENT-COMPLETE.md
See iteration history:
ls /home/olaf/pangolin/.ralph-loop/
Infrastructure ready. Complete 3 quick setups to start using SSO.