itpp-infrastructure — CHANGELOG
- Created CHANGELOG.md (missing per project documentation standard)
- Project directory:
/root/projects/itpp-infrastructure
2026-08-10 — Docs Auth Gate
- Added:
docs-auth-gate.md — full documentation of the auth gate for docs.itpropartner.com
- Components:
/opt/docs-auth/auth-validator.py on app3 — JWT validator + sign-in handler (port 8099)/etc/systemd/system/docs-auth-validator.service — systemd unit/etc/nginx/sites-available/docs.itpropartner.com.conf — nginx config with auth_request /auth directive- Auth model: Email allowlist-based access control using auth2 (Stack Auth) JWT tokens
- Flow: Unauthenticated → redirect to sign-in page → authenticate against internal project →
stack-access cookie set → validator checks JWT + email allowlist → access granted
- Allowed users:
g@germainebrown.com, info@itpropartner.com