docs(auth): document local OIDC and Authentik operation

2026-08-18 03:07:33 +02:00
parent 6ec5b76c54
commit f4f38717e1
17 changed files with 407 additions and 0 deletions
@@ -1,5 +1,10 @@
 # Install ThothII on a Linux server

+Server authentication uses generic OIDC with the reverse proxy preserving the configured public
+origin and callback path. Follow the [OIDC guide](authentication-oidc.md), [Authentik guide](authentik.md)
+when applicable, and the [authentication acceptance matrix](../testing/authentication-manual-acceptance.md).
+The host authentication CLI is tht; use tht auth check before workspace Validate/Test.
+
 This guide is for an installer with basic Linux administration and very basic Docker knowledge.
 It deploys the same Compose distribution used on a local PC: the mandatory application is exactly
 `frontend` plus `core`, and pinned Pi is inside `core`. The server does not need host Pi, Node.js,