Compare commits

...
3 Commits
Author SHA1 Message Date
dev-agent 3caf4aab69 Merge pull request 'Docs: identity is Samba AD with Authelia, not LLDAP' (#176) from identity-samba into main
CI / checks (push) Successful in 3m0s
CI / e2e (push) Skipped
2026-10-20 23:19:31 +00:00
dongarandClaude Opus 5.5 073e0caf1a Docs: rewrap the identity lines; M6.3 names only today's directory
CI / checks (push) Skipped
CI / checks (pull_request) Successful in 2m12s
CI / e2e (pull_request) Successful in 4m0s
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01J5Utyfzw7gF7UhjRDEtjTk
2026-10-20 23:11:47 +00:00
bot-claudeandClaude Opus 5.5 cf6058544f Docs: identity is Samba AD with Authelia, not LLDAP
LLDAP was retired on 2026-10-20 (infra/identity#3); agents' accounts are in
Samba AD, still signed in through Authelia.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012qTZm2xcsS8SGngGQ9369K
2026-10-20 23:11:35 +00:00
2 changed files with 7 additions and 7 deletions

No files matched your search

+4 -4
View File
@@ -555,9 +555,9 @@ can do rather than trying to prevent steering.
- **Only credentials are secrets;** every other setting is reviewable
configuration.
**Identity:** each agent is its own LLDAP principal in a tightly scoped Authelia
group, never the operator's account, with its own account and token in each
service it uses (X5).
**Identity:** each agent is its own Samba AD principal in a tightly scoped
Authelia group, never the operator's account, with its own account and token in
each service it uses (X5).
**Logging:** structured JSON lines to the host journal and the log stack. Every
durable state change emits exactly one line, with a fixed envelope (time, agent,
@@ -1131,7 +1131,7 @@ so every upstream action traces to one agent.
### X5. Supporting services
All self-hosted: Matrix (Synapse), Gitea, LiteLLM, the local inference host,
Vaultwarden, LLDAP with Authelia, and SilverBullet for the operator's view of
Vaultwarden, Samba AD with Authelia, and SilverBullet for the operator's view of
the vault. Each agent has its own account, token and room in each; nothing is
shared between agents.
+3 -3
View File
@@ -47,8 +47,8 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
## 2. The environment today
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, LLDAP with
Authelia. The infrastructure repository exists in Gitea.
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD
with Authelia. The infrastructure repository exists in Gitea.
- **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
(PR #55) chose `qwen3.8-27b` for local work.
- **Models by role today:** driver and helper `claude-opus-5-5`, expert
@@ -572,7 +572,7 @@ SilverBullet so far (M5.4).
(D7, X2), collection when idle.
**M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
LLDAP principal (L12).
Samba AD principal (L12).
**M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).