feat: secure frontend and provider ingress

scripts/src/config.ts

@@ -11,7 +11,9 @@ export interface UniDeskConfig {
     core: { port: number; containerPort: number };
     frontend: { port: number; containerPort: number };
     database: { port: number; containerPort: number };
+    providerIngress: { port: number; containerPort: number };
   };
+  auth: { username: string; password: string; sessionSecret: string; sessionTtlSeconds: number };
   database: { user: string; password: string; name: string; volume: string; volumeSize: string };
   providerGateway: {
     id: string;
@@ -67,6 +69,7 @@ export function readConfig(): UniDeskConfig {
   const runtime = asRecord(parsed.runtime, "runtime");
   const network = asRecord(parsed.network, "network");
   const database = asRecord(parsed.database, "database");
+  const auth = asRecord(parsed.auth, "auth");
   const providerGateway = asRecord(parsed.providerGateway, "providerGateway");
   const docker = asRecord(parsed.docker, "docker");
   const paths = asRecord(parsed.paths, "paths");
@@ -83,6 +86,7 @@ export function readConfig(): UniDeskConfig {
       core: portPair(network, "core"),
       frontend: portPair(network, "frontend"),
       database: portPair(network, "database"),
+      providerIngress: portPair(network, "providerIngress"),
     },
     database: {
       user: stringField(database, "user", "database"),
@@ -113,5 +117,11 @@ export function readConfig(): UniDeskConfig {
       port: numberField(sshForwarding, "port", "sshForwarding"),
       user: stringField(sshForwarding, "user", "sshForwarding"),
     },
+    auth: {
+      username: stringField(auth, "username", "auth"),
+      password: stringField(auth, "password", "auth"),
+      sessionSecret: stringField(auth, "sessionSecret", "auth"),
+      sessionTtlSeconds: numberField(auth, "sessionTtlSeconds", "auth"),
+    },
   };
 }