OpenFGA

The OpenFGA (openfga) application installs a local OpenFGA service for use by other IncusOS applications, such as Operations Center.

Note

This OpenFGA service is not intended for general-purpose use. By default, it only allows configuring shared authentication keys, and only the local sqlite storage engine is supported.

On first start, the openfga application will generate a random shared authentication key that can be retrieved via the application’s API as part of its configuration. Additional authentication keys can be set if desired.

The OpenFGA service will automatically use the TLS certificate configured for the primary application to provide a TLS-secured HTTPS API endpoint on port 8444.