konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 10 Packages Projects Releases 1 Wiki Activity

feat(paperless): Syncthing UI behind the Authentik gate #1529

Merged
k.renner merged 1 commits from worktree-syncthing-ui-gate into main 2026-10-30 10:45:09 +00:00
Conversation 0 Commits 1 Files Changed 6
+69 -14
claude-bot commented 2026-10-30 10:40:54 +00:00
Member
Copy Link
Copy Source

Publishes the Syncthing web UI at https://syncthing.paperless.renner.uno through the Authentik gate. Only members of Paperless Admins can pass.

  • New LAN-only Ingress syncthing-ui in front of the existing syncthing-ui Service. authentik-gate-sync generates the provider and the CNP that admits Traefik.
  • Paperless Admins is declared in the Authentik blueprint, like the other gate groups. Membership stays in Authentik.
  • The sync LoadBalancer held the UI hostname, so its DNS name moves to sync.paperless.renner.uno. Its addresses (10.2.99.85, fd99::85) stay the same. The dns-lan-syncthing probe follows the new name.
  • New Kuma monitor Syncthing Login checks that the gate serves the login page.

Peers with a static tcp://syncthing.paperless.renner.uno:22000 address must switch to tcp://sync.paperless.renner.uno:22000.

🤖 Generated with Claude Code

Publishes the Syncthing web UI at https://syncthing.paperless.renner.uno through the Authentik gate. Only members of Paperless Admins can pass. - New LAN-only Ingress syncthing-ui in front of the existing syncthing-ui Service. authentik-gate-sync generates the provider and the CNP that admits Traefik. - Paperless Admins is declared in the Authentik blueprint, like the other gate groups. Membership stays in Authentik. - The sync LoadBalancer held the UI hostname, so its DNS name moves to sync.paperless.renner.uno. Its addresses (10.2.99.85, fd99::85) stay the same. The dns-lan-syncthing probe follows the new name. - New Kuma monitor Syncthing Login checks that the gate serves the login page. Peers with a static tcp://syncthing.paperless.renner.uno:22000 address must switch to tcp://sync.paperless.renner.uno:22000. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-10-30 10:40:55 +00:00
feat(paperless): Syncthing UI behind the Authentik gate
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
3aa2cf7616 
Serve the UI at syncthing.paperless.renner.uno for Paperless Admins. That hostname was the sync LoadBalancer's DNS name, so the LoadBalancer moves to sync.paperless.renner.uno and the DNS probe follows it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit a49c852666 into main 2026-10-30 10:45:09 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#1529