Does self-hosted Kratos have a config option to set an Admin API

Authentication: bearer <token>

? or some kind of authentication? I only see

oryAccessToken

in reference to Ory Cloud.

Admin API shouldn’t be exposed to outside at all.

Internal private network access

why do you need Authentication then?

why TLS wrap traffic between nodes in a private network? why ensure only apps that are authorized talk to sensitive systems in the same network?

it is different )

Aight. coolio! Where necessary, I’ll keep the api behind a proxy and maybe use Oathkeeper’s jwt authentication to control access. At least until we have a functioning mesh.

sounds like a solution :)