misc/ansible-base
0
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

Compare commits

base: misc:0a5acb790778815e982aee805e9558eee3d008d9
Branches Tags
misc:main
misc:dev-var_objects
misc:task-230-tandoor
misc:task-230-mealie
misc:task-187
misc:dev-authelia_hashed_client_secrets
misc:task-186
misc:dev-mas
misc:dev-wiki.js
...
compare: misc:4dc49134588735c91c0a51e638d2cb275e94e3b0
Branches Tags
misc:main
misc:dev-var_objects
misc:task-230-tandoor
misc:task-230-mealie
misc:task-187
misc:dev-authelia_hashed_client_secrets
misc:task-186
misc:dev-mas
misc:dev-wiki.js

2 commits
0a5acb7907 ... 4dc4913458

Author SHA1 Message Date
Christian Fraß
4dc4913458 [mod] hedgedoc:default:auth:changed to "internal" 2024-10-17 18:07:02 +02:00
Christian Fraß
17354eb042 [mod] role:mas:auth 2024-10-17 18:06:42 +02:00
4 changed files with 43 additions and 47 deletions
Show stats Expand all files Collapse all files

2
roles/hedgedoc/defaults/main.json
View file

@ -11,7 +11,7 @@
"var_hedgedoc_database_data_postgresql_password": "REPLACE_ME",
"var_hedgedoc_database_data_postgresql_schema": "hedgedoc",
"var_hedgedoc_domain": "hedgedoc.example.org",
"var_hedgedoc_authentication_kind": "authelia",
"var_hedgedoc_authentication_kind": "internal",
"var_hedgedoc_authentication_data_authelia_client_id": "hedgedoc",
"var_hedgedoc_authentication_data_authelia_client_secret": "REPLACE_ME",
"var_hedgedoc_authentication_data_authelia_url_base": "https://authelia.example.org",

16
roles/mas/defaults/main.json
View file

@ -12,13 +12,11 @@
"var_mas_matrix_secret": "REPLACE_ME",
"var_mas_matrix_endpoint": "http://localhost:8008/",
"var_mas_encryption_key": "REPLACE_ME",
"var_mas_authentication_upstream_active": false,
"var_mas_authentication_upstream_id": "default_upstream",
"var_mas_authentication_upstream_issuer": "https://auth.example.org",
"var_mas_authentication_upstream_client_id": "mas",
"var_mas_authentication_upstream_client_secret": "REPLACE_ME",
"var_mas_authentication_upstream_token_endpoint_auth_method": "client_secret_post"
"var_mas_authentication_upstream_scope": "openid email profile",
"var_mas_authentication_upstream_authorization_endpoint": "https://auth.example.org/authorize",
"var_mas_authentication_upstream_token_endpoint": "https://auth.example.org/token"
"var_mas_authentication_upstream_kind": "none",
"var_mas_authentication_upstream_data_authelia_url_base": "https://authelia.example.org",
"var_mas_authentication_upstream_data_authelia_auth_method": "client_secret_post",
"var_mas_authentication_upstream_data_authelia_scope": "openid profile email",
"var_mas_authentication_upstream_data_authelia_name": "authelia",
"var_mas_authentication_upstream_data_authelia_client_id": "mas",
"var_mas_authentication_upstream_data_authelia_client_secret": "REPLACE_ME"
}

20
roles/mas/templates/config-base.json.j2
View file

@ -85,18 +85,20 @@
],
"minimum_complexity": 3
},
{% if var_mas_authentication_upstream_active %}
{% if var_mas_authentication_upstream_kind == 'none' %}
{% endif %}
{% if var_mas_authentication_upstream_kind == 'authelia' %}
"upstream_oauth2": {
"providers": [
{
"id": "{{var_mas_authentication_upstream_id}}",
"issuer": "{{var_mas_authentication_upstream_issuer}}",
"client_id": "{{var_mas_authentication_upstream_client_id}}",
"client_secret": "{{var_mas_authentication_upstream_client_secret}}",
"token_endpoint_auth_method": "{{var_mas_authentication_upstream_token_endpoint_auth_method}}",
"scope": "{{var_mas_authentication_upstream_scope}}",
"authorization_endpoint": "{{var_mas_authentication_upstream_authorization_endpoint}}",
"token_endpoint": "{{var_mas_authentication_upstream_token_endpoint}}"
"id": "{{var_mas_authentication_upstream_data_authelia_name}}",
"issuer": "{{var_mas_authentication_upstream_data_authelia_url_base}}",
"authorization_endpoint": "{{var_mas_authentication_upstream_data_authelia_url_base}}/api/oidc/authorization",
"token_endpoint": "{{var_mas_authentication_upstream_data_authelia_url_base}}/api/oidc/token",
"token_endpoint_auth_method": "{{var_mas_authentication_upstream_data_authelia_auth_method}}",
"scope": "{{var_mas_authentication_upstream_data_authelia_scope}}",
"client_id": "{{var_mas_authentication_upstream_data_authelia_client_id}}",
"client_secret": "{{var_mas_authentication_upstream_data_authelia_client_secret}}"
}
]
},

52
roles/mas/vardef.json
View file

@ -43,40 +43,36 @@
"type": "string",
"mandatory": false
},
"authentication_upstream_active": {
"authentication_upstream_kind": {
"nullable": false,
"type": "boolean"
"type": "string",
"options": [
"none",
"authelia"
]
},
"authentication_upstream_id": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_url_base": {
"type": "string",
"mandatory": false
},
"authentication_upstream_issuer": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_auth_method": {
"type": "string",
"mandatory": false
},
"authentication_upstream_client_id": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_scope": {
"type": "string",
"mandatory": false
},
"authentication_upstream_client_secret": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_name": {
"type": "string",
"mandatory": false
},
"authentication_upstream_token_endpoint_auth_method": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_client_id": {
"type": "string",
"mandatory": false
},
"authentication_upstream_scope": {
"nullable": false,
"type": "string"
},
"authentication_upstream_authorization_endpoint": {
"nullable": false,
"type": "string"
},
"authentication_upstream_token_endpoint": {
"nullable": false,
"type": "string"
"authentication_upstream_data_authelia_client_secret": {
"type": "string",
"mandatory": false
}
}