refactor: replace mkdocs with zensical (#2667)
* move docs to zensical * fix requirements * fixes * remove manual font loading does not work properly with mike * switch back to pymdownx.blocks.admonition * revert back * remove css * add note about privacy plugin * pr review findings
This commit is contained in:
@@ -5,6 +5,7 @@ title: API
|
||||
/// warning | Breaking Changes
|
||||
|
||||
This API is not yet stable and may change in the future. The API is currently in development and is subject to change without notice. The API is not yet documented, but we will add documentation as the API stabilizes.
|
||||
|
||||
///
|
||||
|
||||
You can use the API to interact with the application programmatically. The API is available at `/api` and supports both GET and POST requests. The API is designed to be simple and easy to use, with a focus on providing a consistent interface for all endpoints.
|
||||
|
||||
@@ -39,14 +39,14 @@ If a parameter is not set, it will not be added to the configuration. If all Amn
|
||||
|
||||
### Parameter Compatibility Table
|
||||
|
||||
| Parameter | Can differ between server and client | Configurable on server | Configurable on client |
|
||||
| --------- | ------------------------------------ | ---------------------- | ----------------------- |
|
||||
| Jc | ✅ Yes | ✅ | ✅ |
|
||||
| Jmin | ✅ Yes | ✅ | ✅ |
|
||||
| Jmax | ✅ Yes | ✅ | ✅ |
|
||||
| S1-S4 | ❌ No, must match | ✅ | ❌ (copied from server) |
|
||||
| H1-H4 | ❌ No, must match | ✅ | ❌ (copied from server) |
|
||||
| I1-I5 | ✅ Yes | ✅ | ✅ |
|
||||
| Parameter | Can differ between server and client | Configurable on server | Configurable on client |
|
||||
| --------- | ------------------------------------ | ---------------------- | ------------------------ |
|
||||
| Jc | :white_check_mark: Yes | :white_check_mark: | :white_check_mark: |
|
||||
| Jmin | :white_check_mark: Yes | :white_check_mark: | :white_check_mark: |
|
||||
| Jmax | :white_check_mark: Yes | :white_check_mark: | :white_check_mark: |
|
||||
| S1-S4 | :x: No, must match | :white_check_mark: | :x: (copied from server) |
|
||||
| H1-H4 | :x: No, must match | :white_check_mark: | :x: (copied from server) |
|
||||
| I1-I5 | :white_check_mark: Yes | :white_check_mark: | :white_check_mark: |
|
||||
|
||||
## Client Applications
|
||||
|
||||
|
||||
@@ -24,7 +24,7 @@ To automatically register users that log in with an OAuth provider, set the foll
|
||||
|
||||
| Env | Required | Default | Description |
|
||||
| --------------------- | -------- | ------- | ------------------------ |
|
||||
| `OAUTH_AUTO_REGISTER` | ✖️ | `false` | Enable auto-registration |
|
||||
| `OAUTH_AUTO_REGISTER` | :x: | `false` | Enable auto-registration |
|
||||
|
||||
When enabled:
|
||||
|
||||
@@ -46,7 +46,7 @@ To only allow users with an email address from a specific domain to log in, set
|
||||
|
||||
| Env | Required | Default | Description |
|
||||
| ----------------------- | -------- | ------- | --------------------- |
|
||||
| `OAUTH_ALLOWED_DOMAINS` | ✖️ | - | Allowed email domains |
|
||||
| `OAUTH_ALLOWED_DOMAINS` | :x: | - | Allowed email domains |
|
||||
|
||||
You can allow multiple domains by separating them with a comma:
|
||||
|
||||
@@ -58,7 +58,7 @@ To automatically launch the OAuth login flow when visiting the login page, set t
|
||||
|
||||
| Env | Required | Default | Description |
|
||||
| ------------------- | -------- | ------- | ----------------------------- |
|
||||
| `OAUTH_AUTO_LAUNCH` | ✖️ | - | Auto launch an OAuth provider |
|
||||
| `OAUTH_AUTO_LAUNCH` | :x: | - | Auto launch an OAuth provider |
|
||||
|
||||
When enabled:
|
||||
|
||||
@@ -83,10 +83,10 @@ If your provider does not support multiple redirect URIs (e.g. GitHub) but allow
|
||||
|
||||
#### Google
|
||||
|
||||
| Env | Required | Description |
|
||||
| ---------------------------- | -------- | -------------------- |
|
||||
| `OAUTH_GOOGLE_CLIENT_ID` | ✔️ | Google Client ID |
|
||||
| `OAUTH_GOOGLE_CLIENT_SECRET` | ✔️ | Google Client Secret |
|
||||
| Env | Required | Description |
|
||||
| ---------------------------- | ------------------ | -------------------- |
|
||||
| `OAUTH_GOOGLE_CLIENT_ID` | :white_check_mark: | Google Client ID |
|
||||
| `OAUTH_GOOGLE_CLIENT_SECRET` | :white_check_mark: | Google Client Secret |
|
||||
|
||||
<h5>Setup</h5>
|
||||
|
||||
@@ -97,10 +97,10 @@ If your provider does not support multiple redirect URIs (e.g. GitHub) but allow
|
||||
|
||||
#### GitHub
|
||||
|
||||
| Env | Required | Description |
|
||||
| ---------------------------- | -------- | -------------------- |
|
||||
| `OAUTH_GITHUB_CLIENT_ID` | ✔️ | GitHub Client ID |
|
||||
| `OAUTH_GITHUB_CLIENT_SECRET` | ✔️ | GitHub Client Secret |
|
||||
| Env | Required | Description |
|
||||
| ---------------------------- | ------------------ | -------------------- |
|
||||
| `OAUTH_GITHUB_CLIENT_ID` | :white_check_mark: | GitHub Client ID |
|
||||
| `OAUTH_GITHUB_CLIENT_SECRET` | :white_check_mark: | GitHub Client Secret |
|
||||
|
||||
<h5>Setup</h5>
|
||||
|
||||
@@ -122,12 +122,12 @@ The provider needs to support:
|
||||
|
||||
The provider needs to be available with HTTPS and have a valid certificate.
|
||||
|
||||
| Env | Required | Default | Example | Description |
|
||||
| -------------------------- | -------- | ------- | -------------------------- | ------------------ |
|
||||
| `OAUTH_OIDC_SERVER` | ✔️ | - | `https://auth.example.com` | OIDC Server |
|
||||
| `OAUTH_OIDC_CLIENT_ID` | ✔️ | - | - | OIDC Client ID |
|
||||
| `OAUTH_OIDC_CLIENT_SECRET` | ✔️ | - | - | OIDC Client Secret |
|
||||
| `OAUTH_OIDC_NAME` | ✖️ | OIDC | `Authelia` | Provider Name |
|
||||
| Env | Required | Default | Example | Description |
|
||||
| -------------------------- | ------------------ | ------- | -------------------------- | ------------------ |
|
||||
| `OAUTH_OIDC_SERVER` | :white_check_mark: | - | `https://auth.example.com` | OIDC Server |
|
||||
| `OAUTH_OIDC_CLIENT_ID` | :white_check_mark: | - | - | OIDC Client ID |
|
||||
| `OAUTH_OIDC_CLIENT_SECRET` | :white_check_mark: | - | - | OIDC Client Secret |
|
||||
| `OAUTH_OIDC_NAME` | :x: | OIDC | `Authelia` | Provider Name |
|
||||
|
||||
##### Authelia Setup
|
||||
|
||||
@@ -167,7 +167,7 @@ To disable password-based authentication and only allow login via OAuth provider
|
||||
|
||||
| Env | Required | Default | Description |
|
||||
| ----------------------- | -------- | ------- | ------------------------------- |
|
||||
| `DISABLE_PASSWORD_AUTH` | ✖️ | `false` | Disable password authentication |
|
||||
| `DISABLE_PASSWORD_AUTH` | :x: | `false` | Disable password authentication |
|
||||
|
||||
When enabled:
|
||||
|
||||
|
||||
@@ -23,6 +23,7 @@ These will only be used during the first start of the container. After that, the
|
||||
If variables are in the same group, you have to set all of them. For example, if you set `INIT_IPV4_CIDR`, you also have to set `INIT_IPV6_CIDR`.
|
||||
|
||||
If you want to skip the setup process, you have to configure group `1`
|
||||
|
||||
///
|
||||
|
||||
/// note | Security
|
||||
@@ -30,4 +31,5 @@ If you want to skip the setup process, you have to configure group `1`
|
||||
The initial username and password is not checked for complexity. Make sure to set a long enough username and password. Otherwise, the user won't be able to log in.
|
||||
|
||||
It's recommended to remove the variables after the setup is done to prevent the password from being exposed.
|
||||
|
||||
///
|
||||
|
||||
@@ -39,4 +39,5 @@ You can use the following Grafana dashboard to visualize the metrics:
|
||||
|
||||
The Grafana dashboard is not official and is not maintained by the `wg-easy` team. If you have any issues with the dashboard, please contact the author of the dashboard.
|
||||
See [#1299](https://github.com/wg-easy/wg-easy/pull/1299) for more information.
|
||||
|
||||
///
|
||||
|
||||
Reference in New Issue
Block a user