Erich Blume d21798b1f3 Document Dex OIDC and add services-check integration (#223 )

## Summary
- Create Dex reference card (`docs/reference/services/dex.md`) with quick reference, architecture, identity source, storage, OIDC clients, secrets, and endpoints
- Write federated login explanation article (`docs/explanation/federated-login.md`) covering the Dex + Forgejo two-layer auth model, login flow, and break-glass access
- Add Dex to `services-check` (HTTP health endpoint + k3s pod check)
- Update Grafana docs with new Authentication section documenting SSO via Dex
- Update Forgejo docs with OAuth2 Provider section documenting its role as upstream identity source
- Add Dex to ringtail workloads table and reference service index
- Move `adopt-oidc-provider` plan to `completed/` with final design reflecting actual implementation

## Test plan
- [ ] `mise run services-check` passes (includes new Dex checks)
- [ ] `docs-check-links` passes (all wiki-links resolve)
- [ ] `docs-check-index` passes (new docs are indexed)

Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/223

2026-02-19 20:44:23 -08:00

708 B

Raw Blame History

title

modified

Completed Plans

Plans that have been fully implemented and verified. Kept for historical reference and as templates for future plans.

Plan	Completed	Description
adopt-dagger-ci	2026-02-11	Adopt Dagger as CI/CD build engine (Phases 1–3)
segment-home-network	2026-02-14	Manual three-network segmentation for UniFi Express 7
operationalize-reolink-camera	2026-02-15	Deploy Frigate NVR stack with Mosquitto, Ntfy, and frigate-notify
adopt-oidc-provider	2026-02-19	Deploy Dex OIDC identity provider with Forgejo backend and Grafana SSO

708 B Raw Blame History Unescape Escape

Completed Plans

708 B

Raw Blame History