tegwick 21c2a2f5d5 Let the account site read an existing Authelia sign-in. ... The account site forwards the caller's session cookie to Authelia GET /api/state. Allow that one path from the user-engine pods to Authelia port 9091. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f		2026-09-27 00:22:53 +02:00
..
netpol-databases.yaml	feat(sso-mfa): T02/T03 live apply — age-encrypted secrets, CNPG cluster (NK-WP-0001-T02/T03)	2026-03-20 02:57:41 +00:00
netpol-mfa.yaml	fix(privacyidea): bootstrap-realm scope fixes + netpol for PI→LLDAP	2026-03-25 11:49:26 +00:00
netpol-sso.yaml	Let the account site read an existing Authelia sign-in.	2026-09-27 00:22:53 +02:00