hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Run Zulip on host-managed services

Browse source
This commit is contained in:
Conrad Kramer 2026-04-19 01:11:37 -07:00
parent fa2806e4b3
commit 42df7b5618
3 changed files with 170 additions and 132 deletions
Download patch file Download diff file Expand all files Collapse all files

4
evolution/proposals/BEP-0008-authentik-backed-team-chat-and-workspace-sso.md
View file

@ -49,6 +49,10 @@ across vendor-native Google auth flows when Burrow already operates an IdP.
- Add a Burrow-managed Zulip workload on the forge host at `chat.burrow.net`.
The deployment should be repo-owned and rebuildable from Nix, even if the
runtime uses vendor-supported container images internally.
- Prefer host-managed NixOS services for Zulip's stateful dependencies
(PostgreSQL, Redis, RabbitMQ, memcached, backups) so Burrow owns the
operational surface directly rather than composing a container-side service
mesh.
- Zulip should authenticate through Authentik SAML rather than local passwords
as the primary path. Initial bootstrap may still keep an operational escape
hatch while the deployment is being validated.