Role-based access enforced on every endpoint, sign-in through your directory, and a deployment that never needs to reach the internet.
Users hold a global role and can be granted a different role per project. Every API endpoint checks it on the server, so the browser is never the only line of defence. Users only see projects they have been given access to.
Connect to your directory with LDAPS, base DNs and a bind account, configured in the admin UI and applied without a rebuild. Local accounts remain available for a bootstrap administrator, with passwords hashed using Argon2id.
Map directory groups to global roles or to roles on a specific project. Grant access by directory group rather than user by user.
The application and PostgreSQL 16 in a single-node Compose stack. Migrations apply automatically on first start.
The frontend is fully bundled and nothing calls out. Images move onto the isolated network with docker save and docker load.
Put your existing reverse proxy in front for TLS termination and certificates.