Support secure external LTX OAuth

This commit is contained in:
Mikei386
2026-09-13 22:28:56 +02:00
parent 7d02fa1b8b
commit 719bc4ccf7
3 changed files with 15 additions and 1 deletions
+6
View File
@@ -18,3 +18,9 @@ to Hugging Face in the application.
The image installs a narrow `tar` wrapper that ignores uid/gid metadata in the
official first-run Python archive. This keeps `cap_drop: [ALL]` intact while
allowing the archive, whose entries belong to build user 1001, to be extracted.
The backend uses stable port `41955`. Hugging Face OAuth can therefore run in a
normal client browser through a local SSH tunnel to the container instead of
requiring a browser or storing login credentials inside the VNC desktop.
The container port is published only on Athena's `127.0.0.1`; it is not exposed
on Athena's LAN or WireGuard interfaces.