docs: Add security.html with Passkey/TOTP self-service setup links
Auto-Deploy on Push / verify-and-notify (push) Canceled after 0s
Create Release on Milestone Tag / create-release (push) Canceled after 0s
Auto-Deploy on Push / verify-and-notify (push) Canceled after 0s
Create Release on Milestone Tag / create-release (push) Canceled after 0s
Neither Element Web's config.json nor MAS's branding config expose a generic custom-link mechanism, and /if/user/ is blocked for type=external Matrix accounts, so the working Authentik MFA setup flows had nowhere to be discoverable. Added a docs/setup/security.html page, following the exact existing pattern (ConfigMap -> initContainer cp -> nginx), linked from index.html's Support section.
This commit is contained in:
Thore Cimbal
Regular → Executable
+112
@@ -193,6 +193,7 @@ data:
|
|||||||
<div class="section">
|
<div class="section">
|
||||||
<h2>❓ Support</h2>
|
<h2>❓ Support</h2>
|
||||||
<p>Für weitere Hilfe besuche: <a href="https://element.io/help" target="_blank">element.io/help</a></p>
|
<p>Für weitere Hilfe besuche: <a href="https://element.io/help" target="_blank">element.io/help</a></p>
|
||||||
|
<p>🔐 <a href="security.html">Konto-Sicherheit (Passkey/2FA einrichten)</a></p>
|
||||||
</div>
|
</div>
|
||||||
|
|
||||||
<div class="support">
|
<div class="support">
|
||||||
@@ -203,6 +204,117 @@ data:
|
|||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
|
|
||||||
|
# Security / 2FA setup page
|
||||||
|
"security.html": |
|
||||||
|
<!DOCTYPE html>
|
||||||
|
<html lang="de">
|
||||||
|
<head>
|
||||||
|
<meta charset="UTF-8">
|
||||||
|
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||||
|
<title>Konto-Sicherheit - aXion1337.Chat</title>
|
||||||
|
<style>
|
||||||
|
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||||
|
body {
|
||||||
|
font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", sans-serif;
|
||||||
|
background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
|
||||||
|
min-height: 100vh;
|
||||||
|
padding: 40px 20px;
|
||||||
|
}
|
||||||
|
.container {
|
||||||
|
max-width: 800px;
|
||||||
|
margin: 0 auto;
|
||||||
|
background: white;
|
||||||
|
border-radius: 12px;
|
||||||
|
box-shadow: 0 20px 60px rgba(0,0,0,0.3);
|
||||||
|
padding: 40px;
|
||||||
|
}
|
||||||
|
h1 { color: #333; margin-bottom: 10px; font-size: 2.5em; }
|
||||||
|
.subtitle { color: #666; margin-bottom: 40px; font-size: 1.1em; }
|
||||||
|
.section { margin-bottom: 40px; }
|
||||||
|
.section h2 {
|
||||||
|
color: #667eea;
|
||||||
|
font-size: 1.5em;
|
||||||
|
margin-bottom: 20px;
|
||||||
|
border-bottom: 3px solid #667eea;
|
||||||
|
padding-bottom: 10px;
|
||||||
|
}
|
||||||
|
.download-grid {
|
||||||
|
display: grid;
|
||||||
|
grid-template-columns: repeat(auto-fit, minmax(200px, 1fr));
|
||||||
|
gap: 20px;
|
||||||
|
margin-bottom: 30px;
|
||||||
|
}
|
||||||
|
.download-card {
|
||||||
|
background: #f8f9fa;
|
||||||
|
border: 2px solid #e9ecef;
|
||||||
|
border-radius: 8px;
|
||||||
|
padding: 20px;
|
||||||
|
text-align: center;
|
||||||
|
transition: all 0.3s ease;
|
||||||
|
text-decoration: none;
|
||||||
|
color: #333;
|
||||||
|
}
|
||||||
|
.download-card:hover {
|
||||||
|
border-color: #667eea;
|
||||||
|
background: #f0f3ff;
|
||||||
|
transform: translateY(-5px);
|
||||||
|
box-shadow: 0 10px 30px rgba(102, 126, 234, 0.2);
|
||||||
|
}
|
||||||
|
.download-card .icon { font-size: 2.5em; margin-bottom: 10px; }
|
||||||
|
.download-card .name { font-weight: 600; font-size: 1.1em; margin-bottom: 5px; }
|
||||||
|
.download-card .desc { font-size: 0.9em; color: #666; }
|
||||||
|
.instructions {
|
||||||
|
background: #e7f3ff;
|
||||||
|
border-left: 4px solid #0066cc;
|
||||||
|
padding: 15px;
|
||||||
|
border-radius: 4px;
|
||||||
|
margin: 15px 0;
|
||||||
|
line-height: 1.6;
|
||||||
|
}
|
||||||
|
.support {
|
||||||
|
text-align: center;
|
||||||
|
color: #666;
|
||||||
|
margin-top: 40px;
|
||||||
|
padding-top: 20px;
|
||||||
|
border-top: 1px solid #e9ecef;
|
||||||
|
}
|
||||||
|
.support a { color: #667eea; text-decoration: none; font-weight: 500; }
|
||||||
|
.support a:hover { text-decoration: underline; }
|
||||||
|
</style>
|
||||||
|
</head>
|
||||||
|
<body>
|
||||||
|
<div class="container">
|
||||||
|
<h1>🔐 Konto-Sicherheit</h1>
|
||||||
|
<p class="subtitle">Zwei-Faktor-Authentifizierung ist optional - richte sie nur ein, wenn du sie nutzen möchtest.</p>
|
||||||
|
|
||||||
|
<div class="section">
|
||||||
|
<h2>🔑 Einrichten</h2>
|
||||||
|
<div class="download-grid">
|
||||||
|
<a href="https://auth.axion1337.chat/if/flow/default-authenticator-webauthn-setup/" class="download-card" target="_blank">
|
||||||
|
<div class="icon">🔑</div>
|
||||||
|
<div class="name">Passkey</div>
|
||||||
|
<div class="desc">WebAuthn / Sicherheitsschlüssel</div>
|
||||||
|
</a>
|
||||||
|
<a href="https://auth.axion1337.chat/if/flow/default-authenticator-totp-setup/" class="download-card" target="_blank">
|
||||||
|
<div class="icon">📱</div>
|
||||||
|
<div class="name">TOTP</div>
|
||||||
|
<div class="desc">Authenticator-App</div>
|
||||||
|
</a>
|
||||||
|
</div>
|
||||||
|
<div class="instructions">
|
||||||
|
<strong>Hinweis:</strong> Du musst bei <code>auth.axion1337.chat</code> eingeloggt sein, damit die
|
||||||
|
Einrichtung funktioniert. Ohne konfiguriertes Gerät wird beim Login einfach kein zweiter Faktor abgefragt -
|
||||||
|
2FA ist nie Voraussetzung zum Anmelden.
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
|
||||||
|
<div class="support">
|
||||||
|
<p><a href="index.html">← Zurück zum Setup</a></p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</body>
|
||||||
|
</html>
|
||||||
|
|
||||||
# README
|
# README
|
||||||
"README-Element-Setup.md": |
|
"README-Element-Setup.md": |
|
||||||
# Element Desktop Setup Scripts
|
# Element Desktop Setup Scripts
|
||||||
|
|||||||
Regular → Executable
+1
@@ -21,6 +21,7 @@ spec:
|
|||||||
- |
|
- |
|
||||||
mkdir -p /html/docs/setup
|
mkdir -p /html/docs/setup
|
||||||
cp /config/index.html /html/docs/setup/
|
cp /config/index.html /html/docs/setup/
|
||||||
|
cp /config/security.html /html/docs/setup/
|
||||||
cp /config/README-Element-Setup.md /html/docs/setup/
|
cp /config/README-Element-Setup.md /html/docs/setup/
|
||||||
cp /config/element-setup-windows.cmd /html/docs/setup/
|
cp /config/element-setup-windows.cmd /html/docs/setup/
|
||||||
cp /config/element-setup-macos.command /html/docs/setup/
|
cp /config/element-setup-macos.command /html/docs/setup/
|
||||||
|
|||||||
Regular → Executable
+9
@@ -206,6 +206,15 @@
|
|||||||
|
|
||||||
**None** – Alle CRITICAL Tasks erledigt! Nächster Focus: Database Backups
|
**None** – Alle CRITICAL Tasks erledigt! Nächster Focus: Database Backups
|
||||||
|
|
||||||
|
### Phase 8: Authentik Enrollment/Recovery/MFA Fix (2026-07-27)
|
||||||
|
- [x] **matrix-invitation Flow repariert** – fehlende Write/Password/Login-Stages ergänzt, Reihenfolge korrigiert, als Authentik Blueprint (`apps/authentik/authentik-blueprints.yaml`) reproduzierbar gemacht
|
||||||
|
- [x] **matrix-invitation-prompt** – 16 fehlerhafte `validation_policies` entfernt (crashten mit `AnonymousUser`/`NoneType`-Fehlern)
|
||||||
|
- [x] **Redirect-Stage** – Flow endet jetzt auf `axion1337.chat` statt in der `/if/user/`-Sackgasse (blockiert für `type=external`)
|
||||||
|
- [x] **matrix-recovery Flow gebaut** – war komplett leer (0 Stages); Passwort-Reset funktioniert jetzt, verlinkt von der echten Login-Seite
|
||||||
|
- [x] **Brand.default_application gesetzt** – behebt mehrere Dead-Ends, wenn eingeloggte User `/` ohne Ziel aufrufen
|
||||||
|
- [x] **2FA/Passkey Selbst-Einrichtung** – Links zu `default-authenticator-totp-setup`/`-webauthn-setup` (2FA bleibt optional, `not_configured_action=skip`), dokumentiert unter `axion1337.chat/docs/setup/security.html`
|
||||||
|
- [ ] **Backlog**: MAS Custom-Template-Override, um den 2FA/Passkey-Link direkt auf `account.axion1337.chat/account/` anzuzeigen (statt nur über die Doku-Seite) – erfordert Forken der MAS Tera/Askama-Templates via `templates.path`, höherer Aufwand/Risiko, bei MAS-Updates zu pflegen
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## 📋 Backlog (Weitere Aufgaben)
|
## 📋 Backlog (Weitere Aufgaben)
|
||||||
|
|||||||
Reference in New Issue
Block a user