misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

[task-230] [fix] role:postgresql-for-tandoor

Browse source
This commit is contained in:
roydfalk 2025-01-11 15:45:08 +01:00
parent 5a7f10561c
commit 9a86117869
4 changed files with 9 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
roles/authelia-for-tandoor/info.md
View file

@ -7,3 +7,4 @@ Um [Tandoor](../tandoor) gegen [Authelia](../authelia) authentifizieren zu lasse
- [allauth | OpenID Connect](https://docs.allauth.org/en/latest/socialaccount/providers/openid_connect.html) - [allauth | OpenID Connect](https://docs.allauth.org/en/latest/socialaccount/providers/openid_connect.html)
- [Tandoor-Dokumentation | Configuration Example for Authelia](https://docs.tandoor.dev/features/authentication/#configuration-example-for-authelia) - [Tandoor-Dokumentation | Configuration Example for Authelia](https://docs.tandoor.dev/features/authentication/#configuration-example-for-authelia)
- https://django-allauth.readthedocs.io/en/latest/socialaccount/providers/authelia.html

6
roles/postgresql-for-tandoor/tasks/main.json
View file

@ -15,7 +15,7 @@
"name": "user", "name": "user",
"become": true, "become": true,
"become_user": "tandoor", "become_user": "tandoor",
"community.tandoorql.tandoorql_user": { "community.postgresql.postgresql_user": {
"state": "present", "state": "present",
"name": "{{var_postgresql_for_tandoor_username}}", "name": "{{var_postgresql_for_tandoor_username}}",
"password": "{{var_postgresql_for_tandoor_password}}" "password": "{{var_postgresql_for_tandoor_password}}"
@ -28,7 +28,7 @@
"name": "schema", "name": "schema",
"become": true, "become": true,
"become_user": "tandoor", "become_user": "tandoor",
"community.tandoorql.tandoorql_db": { "community.postgresql.postgresql_db": {
"state": "present", "state": "present",
"name": "{{var_postgresql_for_tandoor_schema}}", "name": "{{var_postgresql_for_tandoor_schema}}",
"owner": "{{var_postgresql_for_tandoor_username}}" "owner": "{{var_postgresql_for_tandoor_username}}"
@ -38,7 +38,7 @@
"name": "rights", "name": "rights",
"become": true, "become": true,
"become_user": "tandoor", "become_user": "tandoor",
"community.tandoorql.tandoorql_privs": { "community.postgresql.postgresql_privs": {
"state": "present", "state": "present",
"db": "{{var_postgresql_for_tandoor_schema}}", "db": "{{var_postgresql_for_tandoor_schema}}",
"objs": "ALL_IN_SCHEMA", "objs": "ALL_IN_SCHEMA",

2
roles/tandoor/info.md
View file

@ -9,6 +9,8 @@ Für Rezepte-Sammlung [Tandoor](https://tandoor.dev/)
- [Tandoor-Dokumentation | Konfiguration](https://docs.tandoor.dev/system/configuration/) - [Tandoor-Dokumentation | Konfiguration](https://docs.tandoor.dev/system/configuration/)
- [Tandoor-Dokumentation | Allauth](https://docs.tandoor.dev/features/authentication/#allauth) - [Tandoor-Dokumentation | Allauth](https://docs.tandoor.dev/features/authentication/#allauth)
- https://docs.djangoproject.com/en/5.1/ref/django-admin/#envvar-DJANGO_SUPERUSER_PASSWORD - https://docs.djangoproject.com/en/5.1/ref/django-admin/#envvar-DJANGO_SUPERUSER_PASSWORD
- [allauth-Dokumentation | OpenID Connect](https://docs.allauth.org/en/latest/socialaccount/providers/openid_connect.html)
- [allauth-Dokumentation | Authelia](https://docs.allauth.org/en/latest/socialaccount/providers/authelia.html)
## ToDo ## ToDo

4
roles/tandoor/templates/conf.j2
View file

@ -19,7 +19,9 @@ REMOTE_USER_AUTH=0
{% if var_tandoor_authentication_kind == 'authelia' %} {% if var_tandoor_authentication_kind == 'authelia' %}
ENABLE_SIGNUP=0 ENABLE_SIGNUP=0
REMOTE_USER_AUTH=1 REMOTE_USER_AUTH=1
SOCIALACCOUNT_PROVIDERS={"openid_connect": {"OAUTH_PKCE_ENABLED": false, "APPS": [{"provider_id": "authelia", "name": "{{var_tandoor_authentication_data_authelia_label}}", "client_id": "{{var_tandoor_authentication_data_authelia_client_id}}", "secret": "{{var_tandoor_authentication_data_authelia_client_secret}}", "settings": {"server_url":"{{var_tandoor_authentication_data_authelia_url_base}}", "token_auth_method": "client_secret_basic", "oauth_pkce_enabled": false}}]}} SOCIAL_PROVIDERS=allauth.socialaccount.providers.openid
# SOCIALACCOUNT_PROVIDERS={"openid_connect": {"OAUTH_PKCE_ENABLED": false, "APPS": [{"provider_id": "authelia", "name": "{{var_tandoor_authentication_data_authelia_label}}", "client_id": "{{var_tandoor_authentication_data_authelia_client_id}}", "secret": "{{var_tandoor_authentication_data_authelia_client_secret}}", "settings": {"server_url":"{{var_tandoor_authentication_data_authelia_url_base}}", "token_auth_method": "client_secret_basic", "oauth_pkce_enabled": false}}]}}
SOCIALACCOUNT_PROVIDERS={"openid_connect": {"APPS": [{"provider_id": "authelia", "name": "{{var_tandoor_authentication_data_authelia_label}}", "client_id": "{{var_tandoor_authentication_data_authelia_client_id}}", "secret": "{{var_tandoor_authentication_data_authelia_client_secret}}", "settings": {"server_url": "{{var_tandoor_authentication_data_authelia_url_base}}/.well-known/openid-configuration"}}]}}
{% endif %} {% endif %}
SECRET_KEY={{var_tandoor_secret_key}} SECRET_KEY={{var_tandoor_secret_key}}