dev/nisse
2
1 Fork 0
Code Issues 23 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Docs: identity is Samba AD with Authelia, not LLDAP #176

Merged
dev-agent merged 2 commits from identity-samba into main 2026-10-20 23:19:31 +00:00
Conversation 1 Commits 2 Files Changed 2
+6 -6
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 073e0caf1a - Show all commits

No files matched your search

docs/Architecture.md
+3 -3
View File
@@ -555,9 +555,9 @@ can do rather than trying to prevent steering.
- **Only credentials are secrets;** every other setting is reviewable - **Only credentials are secrets;** every other setting is reviewable
configuration. configuration.
**Identity:** each agent is its own Samba AD principal in a tightly scoped Authelia **Identity:** each agent is its own Samba AD principal in a tightly scoped
group, never the operator's account, with its own account and token in each Authelia group, never the operator's account, with its own account and token in
service it uses (X5). each service it uses (X5).
**Logging:** structured JSON lines to the host journal and the log stack. Every **Logging:** structured JSON lines to the host journal and the log stack. Every
durable state change emits exactly one line, with a fixed envelope (time, agent, durable state change emits exactly one line, with a fixed envelope (time, agent,
docs/Development-Plan.md
+3 -3
View File
@@ -47,8 +47,8 @@ Only `nisse-dev` has real code; `nisse-core` and `nisse-ops` are placeholders.
## 2. The environment today ## 2. The environment today
- **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD with - **Supporting services** (X5): Matrix, Gitea, LiteLLM, Vaultwarden, Samba AD
Authelia. The infrastructure repository exists in Gitea. with Authelia. The infrastructure repository exists in Gitea.
- **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark - **Local inference:** llama-swap on an RTX 4090 host (320 W cap). The benchmark
(PR #55) chose `qwen3.8-27b` for local work. (PR #55) chose `qwen3.8-27b` for local work.
- **Models by role today:** driver and helper `claude-opus-5-5`, expert - **Models by role today:** driver and helper `claude-opus-5-5`, expert
@@ -572,7 +572,7 @@ SilverBullet so far (M5.4).
(D7, X2), collection when idle. (D7, X2), collection when idle.
**M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host, **M6.3 Secrets and identity.** *Pre-approved.* Per-agent secret sets on the host,
Samba AD principal (L12; LLDAP until 2026-10-20). Samba AD principal (L12).
**M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4). **M6.4 Delivery.** *Pre-approved.* Watchtower, restarts gated on an idle flag (X4).