Changed keycloak application id

This commit is contained in:
Kevin Veen-Birkenbach 2025-07-17 07:16:38 +02:00
parent 4f06f94023
commit a04a1710d3
No known key found for this signature in database
GPG Key ID: 44D8F11FD62F878E
7 changed files with 12 additions and 12 deletions

View File

@ -52,7 +52,7 @@ ports:
web-app-port-ui: 8029 web-app-port-ui: 8029
bluesky_api: 8030 bluesky_api: 8030
bluesky_web: 8031 bluesky_web: 8031
keycloak: 8032 web-app-keycloak: 8032
lam: 8033 lam: 8033
phpmyadmin: 8034 phpmyadmin: 8034
snipe-it: 8035 snipe-it: 8035

View File

@ -28,7 +28,7 @@ defaults_networks:
subnet: 192.168.101.128/28 subnet: 192.168.101.128/28
web-app-joomla: web-app-joomla:
subnet: 192.168.101.144/28 subnet: 192.168.101.144/28
keycloak: web-app-keycloak:
subnet: 192.168.101.160/28 subnet: 192.168.101.160/28
web-app-wordpress: web-app-wordpress:
subnet: 192.168.101.176/28 subnet: 192.168.101.176/28

View File

@ -517,7 +517,7 @@
"/realms/{{ keycloak_realm }}/account/*" "/realms/{{ keycloak_realm }}/account/*"
], ],
"webOrigins": [ "webOrigins": [
"{{ domains | get_url('keycloak', web_protocol) }}" "{{ domains | get_url('web-app-keycloak', web_protocol) }}"
], ],
"notBefore": 0, "notBefore": 0,
"bearerOnly": false, "bearerOnly": false,
@ -1697,7 +1697,7 @@
"replyTo": "", "replyTo": "",
"host": "{{system_email.host}}", "host": "{{system_email.host}}",
"from": "{{ users['no-reply'].email }}", "from": "{{ users['no-reply'].email }}",
"fromDisplayName": "Keycloak Authentification System - {{domains | get_domain('keycloak')}}", "fromDisplayName": "Keycloak Authentification System - {{domains | get_domain('web-app-keycloak')}}",
"envelopeFrom": "", "envelopeFrom": "",
"ssl": "true", "ssl": "true",
"user": "{{ users['no-reply'].email }}" "user": "{{ users['no-reply'].email }}"

View File

@ -1,4 +1,4 @@
application_id: "keycloak" # Internal CyMaIS application id application_id: "web-app-keycloak" # Internal CyMaIS application id
database_type: "postgres" # Database which will be used database_type: "postgres" # Database which will be used
keycloak_container: "{{ applications | get_app_conf(application_id, 'docker.services.keycloak.name', True) }}" # Name of the keycloack docker container keycloak_container: "{{ applications | get_app_conf(application_id, 'docker.services.keycloak.name', True) }}" # Name of the keycloack docker container
keycloak_host_import_directory: "{{ docker_compose.directories.volumes }}import/" # Directory in which keycloack import files are placed on the host keycloak_host_import_directory: "{{ docker_compose.directories.volumes }}import/" # Directory in which keycloack import files are placed on the host

View File

@ -25,7 +25,7 @@ plugin_configuration:
configkey: "custom_providers" configkey: "custom_providers"
configvalue: configvalue:
custom_oidc: custom_oidc:
- name: "{{ domains | get_domain('keycloak') }}" - name: "{{ domains | get_domain('web-app-keycloak') }}"
title: "keycloak" title: "keycloak"
style: "keycloak" style: "keycloak"
authorizeUrl: "{{ oidc.client.authorize_url }}" authorizeUrl: "{{ oidc.client.authorize_url }}"

View File

@ -2,7 +2,7 @@ http_address = "0.0.0.0:4180"
cookie_secret = "{{ applications | get_app_conf(oauth2_proxy_application_id, 'credentials.oauth2_proxy_cookie_secret', True) }}" cookie_secret = "{{ applications | get_app_conf(oauth2_proxy_application_id, 'credentials.oauth2_proxy_cookie_secret', True) }}"
cookie_secure = "true" # True is necessary to force the cookie set via https cookie_secure = "true" # True is necessary to force the cookie set via https
upstreams = "http://{{ applications | get_app_conf(oauth2_proxy_application_id, 'oauth2_proxy.application', True) }}:{{ applications | get_app_conf(oauth2_proxy_application_id, 'oauth2_proxy.port', True) }}" upstreams = "http://{{ applications | get_app_conf(oauth2_proxy_application_id, 'oauth2_proxy.application', True) }}:{{ applications | get_app_conf(oauth2_proxy_application_id, 'oauth2_proxy.port', True) }}"
cookie_domains = ["{{ domains | get_domain(oauth2_proxy_application_id) }}", "{{ domains | get_domain('keycloak') }}"] # Required so cookie can be read on all subdomains. cookie_domains = ["{{ domains | get_domain(oauth2_proxy_application_id) }}", "{{ domains | get_domain('web-app-keycloak') }}"] # Required so cookie can be read on all subdomains.
whitelist_domains = [".{{ primary_domain }}"] # Required to allow redirection back to original requested target. whitelist_domains = [".{{ primary_domain }}"] # Required to allow redirection back to original requested target.
# keycloak provider # keycloak provider

View File

@ -32,19 +32,19 @@ applications:
description: Access the central admin console description: Access the central admin console
icon: icon:
class: fa-solid fa-shield-halved class: fa-solid fa-shield-halved
url: https://{{domains | get_domain('keycloak')}}/admin url: https://{{domains | get_domain('web-app-keycloak')}}/admin
iframe: {{ applications | get_app_conf( 'keycloak', 'features.port-ui-desktop', False) }} iframe: {{ applications | get_domain( 'web-app-keycloak', 'features.port-ui-desktop', False) }}
- name: Profile - name: Profile
description: Update your personal admin settings description: Update your personal admin settings
icon: icon:
class: fa-solid fa-user-gear class: fa-solid fa-user-gear
url: https://{{ domains | get_domain('keycloak') }}/realms/{{oidc.client.id}}/account url: https://{{ domains | get_domain('web-app-keycloak') }}/realms/{{oidc.client.id}}/account
iframe: {{ applications | get_app_conf( 'keycloak', 'features.port-ui-desktop', False) }} iframe: {{ applications | get_domain( 'web-app-keycloak', 'features.port-ui-desktop', False) }}
- name: Logout - name: Logout
description: End your admin session securely description: End your admin session securely
icon: icon:
class: fa-solid fa-right-from-bracket class: fa-solid fa-right-from-bracket
url: https://{{ domains | get_domain('keycloak') }}/realms/{{oidc.client.id}}/protocol/openid-connect/logout url: https://{{ domains | get_domain('web-app-keycloak') }}/realms/{{oidc.client.id}}/protocol/openid-connect/logout
iframe: false iframe: false
{% endif %} {% endif %}