ansible-base/roles/mas/templates/config-upstream.json.j2
2024-10-17 23:15:10 +02:00

35 lines
1.3 KiB
Django/Jinja

{
{% if var_mas_authentication_upstream_kind == 'none' %}
{% endif %}
{% if var_mas_authentication_upstream_kind == 'authelia' %}
"upstream_oauth2": {
"providers": [
{
"id": "{{var_mas_authentication_upstream_data_authelia_id}}",
"issuer": "{{var_mas_authentication_upstream_data_authelia_url_base}}",
"authorization_endpoint": "{{var_mas_authentication_upstream_data_authelia_url_base}}/api/oidc/authorization",
"token_endpoint": "{{var_mas_authentication_upstream_data_authelia_url_base}}/api/oidc/token",
"token_endpoint_auth_method": "{{var_mas_authentication_upstream_data_authelia_auth_method}}",
"scope": "{{var_mas_authentication_upstream_data_authelia_scope}}",
"discovery_mode": "insecure",
"client_id": "{{var_mas_authentication_upstream_data_authelia_client_id}}",
"client_secret": "{{var_mas_authentication_upstream_data_authelia_client_secret}}",
"claims_imports": {
"localpart": {
"action": "require",
"template": "{{"{{"}} user.preferred_username {{"}}"}}"
},
"displayname": {
"action": "suggest",
"template": "{{"{{"}} user.name {{"}}"}}"
},
"email": {
"action": "suggest",
"template": "{{"{{"}} user.email {{"}}"}}",
"set_email_verification": "always"
}
}
]
}
{% endif %}
}