weircon-front: SSO-portal til weircon.dk (Authentik-login, app-dashboard, admin, favoritter, tema, palette)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

deploy/portal.env.example

@@ -0,0 +1,13 @@
+# Kopiér til /etc/portal.env og udfyld. INGEN secrets i git.
+AUTHENTIK_BASE=https://authentik.weircon.dk
+OIDC_CLIENT_ID=__udfyld__
+OIDC_CLIENT_SECRET=__udfyld__
+AUTHENTIK_API_TOKEN=__service-account-token__
+SESSION_SECRET=__tilfaeldig-lang-streng__
+OIDC_REDIRECT_URI=https://weircon.dk/auth/callback
+ADMIN_GROUP=authentik Admins
+MATOMO_BASE=https://matomo.weircon.dk
+MATOMO_TOKEN=__matomo-token__
+MATOMO_SITE=2
+IP_LABELS_REMOTE=root@192.168.10.201:/opt/npmplus/custom_nginx/ip_labels.json
+PORTAL_DATA=/opt/portal/data

deploy/portal.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Weircon Portal (SSO dashboard + admin)
+After=network-online.target
+[Service]
+EnvironmentFile=/etc/portal.env
+WorkingDirectory=/opt/portal/app
+ExecStart=/opt/portal/venv/bin/uvicorn main:app --host 0.0.0.0 --port 8000 --proxy-headers --forwarded-allow-ips=*
+Restart=always
+RestartSec=5
+[Install]
+WantedBy=multi-user.target