---
last_review: "2025-01-01"
last_reviewer: "-"
documented_code: [ ]
---

```{tags} explanation
```

# Concept #

:::{note}
This page has been migrated from the old documentation, and has not yet been fully revised.
There might be inconsistencies or errors when using with current LinkAhead versions.
:::
% TODO: Issue: https://gitlab.indiscale.com/caosdb/src/linkahead-docs/-/work_items/104
% TODO: Move to more reasonable documents. These are not concepts.

## Envoy ##

Envoy allows serving GRPC and XML API under the same port. It can be enabled by setting
`envoy_enabled: true` in the profile in which case an envoy image is started together with
LinkAhead. The envoy config offers the basic prerequisites to be used together with WebGRPC modules.
It also serves a default configuration that allows to serve the ACM module under 
`/webinterface/acm`.

## Authentication and permissions ##

- If `local_users` is set to `true` in the profile in Linux, the local user and password database
  will be included into the Docker container, so that users can authenticate themselves with their
  usual password.
    - In this case, also the anonymous user will have full administrative permissions, so starting
      to use LinkAhead is as simple as possible.