Recover: JarvisOS Auth (SSO)
No signal criticalSession issuer and forward-auth endpoint for every published route.
- Owner
- homelab-operator
- Target RTO
- 15m
- Last heartbeat
- never
- Dependent entities
- 2
Recovery readiness20/100
Procedure
Read fully before acting.- Auth is a single point of failure for every published route — an auth outage looks like a total outage.
- This status console does not depend on auth: it is loopback-only and reachable over SSH during an auth outage. That is deliberate.
- OAuth client secret lives in /etc/jarvisos/config.env as GOOGLE_CLIENT_SECRET. Rotate through the provider console, never inline.
- Session store is Redis — a Redis flush signs everyone out but does not lose durable data.
Bring-up order
Dependencies first — starting out of order is a common second incident.- VIN / VPS Node
- ISP Uplink Dependency
- Google OAuth Dependency
- Home1 Node
- Redis (cache / queue) Database
- JarvisOS Auth (SSO) Auth target
What this affects
Impacted if this stays down, or while you restart it.Readiness breakdown
- Documented runbook 20 pts
- No backup configured 50 pts
- No failover target configured 30 pts