ilia/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ansible/docs/guides/listmonk-authentik-oidc.md
ilia 0f34c51fc8
All checks were successful
CI / skip-ci-check (pull_request) Successful in 8s
Details
CI / lint-and-test (pull_request) Successful in 17s
Details
CI / secret-scanning (pull_request) Successful in 8s
Details
CI / dependency-scan (pull_request) Successful in 18s
Details
CI / ansible-validation (pull_request) Successful in 54s
Details
CI / sast-scan (pull_request) Successful in 29s
Details
CI / license-check (pull_request) Successful in 14s
Details
CI / vault-check (pull_request) Successful in 13s
Details
CI / container-scan (pull_request) Successful in 8s
Details
CI / sonar-analysis (pull_request) Successful in 8s
Details
CI / playbook-test (pull_request) Successful in 27s
Details
CI / workflow-summary (pull_request) Successful in 6s
Details
Complete homelab post-sprint: SSO docs, monitoring scripts, phase 0/1 closure. 
Consolidate sprint status into handoff docs, add Listmonk/Mattermost/Mailcow
and Vikunja SSO guides, Beszel alerts script, mattermost inventory, and
mark phases 0–1 complete with phase 2 backlog for edge Caddy and security.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-05-24 12:13:55 -04:00

1.6 KiB
Raw Blame History

Listmonk ↔ Authentik OIDC

Status: Live at https://listmonk.levkin.ca (LXC 221, 10.0.10.148).

Requires listmonk v5+ (OIDC). Upgraded from v2.4.0 → v6.1.0 on 2026-05-24.

Authentik

Item Value
Application slug listmonk
Provider name listmonk-oidc
Client ID listmonk
Redirect URI (strict) https://listmonk.levkin.ca/auth/oidc
Subject mode user_username
Signing key authentik Self-signed Certificate
Access group homelab-users (app binding)

Client secret: vault_listmonk_oidc_client_secret in Ansible vault (rotate if exposed).

Listmonk

Configured via Settings → Security → OIDC (stored in DB):

  • Provider URL: https://auth.levkin.ca/application/o/listmonk/
  • Auto-create users: enabled (Super Admin role id 1 for new SSO users)

Break-glass: local user listmonk (password login still enabled).

Login

  1. Sign out: https://auth.levkin.ca/if/user/logout/
  2. https://listmonk.levkin.ca/admin → Login with Authentik
  3. Sign in as ilia (must be in homelab-users)

Upgrade (if needed)

ssh root@10.0.10.148
systemctl stop listmonk
curl -fsSL -o /tmp/lm.tgz https://github.com/knadh/listmonk/releases/download/v6.1.0/listmonk_6.1.0_linux_amd64.tar.gz
tar -xzf /tmp/lm.tgz -C /tmp && mv /tmp/listmonk /root/listmonk
/root/listmonk --config /etc/listmonk/config.toml --upgrade --yes
systemctl start listmonk

Related