TAI/TA-Deployment-Broker
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
David Schroeder
2026-07-25 14:51:48 -05:00
parent 1ea21c065e
commit 69cc236635
18 changed files with 770 additions and 106 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+5 -5
View File
@@ -1,9 +1,9 @@
# TAPM Deployment Access
TAPM Deployment Access is a short-lived authorization broker for protected
deployment packages. Technicians authenticate with Gitea, create a deployment
code, and permit a limited number of hosts to download explicitly selected
packages during a fixed authorization window.
deployment packages and installer actions. Technicians authenticate with
Gitea, create a deployment code, and permit a limited number of hosts to use
explicitly selected capabilities during a fixed authorization window.
Default policy:
@@ -20,11 +20,11 @@ The ProxMenu integration contract is documented in
## Components
- `cmd/server`: portal, OAuth flow, authorization API, and protected downloads
- `cmd/server`: portal, OAuth flow, authorization API, uploads, and downloads
- `cmd/migrate`: ordered MariaDB schema migrations with an advisory lock
- `internal/app`: application, security, and registry proxy logic
- `deploy/nginx`: TLS reverse-proxy example
- `compose.yaml`: hardened, loopback-only container deployment
- `compose.yaml`: hardened, host-networked container deployment
## Local checks