mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
kevinveenbirkenbachandClaude Opus 5
5137465c6f
3529 invalid comments in 528 files, grandfathered in while the linter only saw the working-tree diff. Removal ran through the linter's own collectors, so detection and deletion cannot drift: a comment whose opener line is blank before it and whose closer line is blank after it loses all its lines, anything else loses only the comment region, and a line left holding a bare delimiter goes with it. Five files keep their comments behind a nocheck marker instead. Four are upstream configs whose inline docs are upstream's own (mautrix, systemd journald, nextcloud-oidc-login, MediaWiki). In littlejs the commented-out entries ARE the deactivation mechanism for an example tile, so deleting them would delete configuration. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
59 lines
2.6 KiB
Django/Jinja
59 lines
2.6 KiB
Django/Jinja
# {{ TAIGA_CONFIG_APPEND_MARKER }}
|
|
|
|
# Trust the reverse proxy so OIDC callback URLs stay on https.
|
|
SECURE_PROXY_SSL_HEADER = ("HTTP_X_FORWARDED_PROTO", "https")
|
|
USE_X_FORWARDED_HOST = True
|
|
|
|
{% if lookup('objstore', application_id, 'enabled') | bool %}
|
|
DEFAULT_FILE_STORAGE = "storages.backends.s3.S3Storage"
|
|
THUMBNAIL_DEFAULT_STORAGE = DEFAULT_FILE_STORAGE
|
|
AWS_STORAGE_BUCKET_NAME = "{{ lookup('objstore', application_id, 'bucket') }}"
|
|
AWS_S3_ACCESS_KEY_ID = "{{ lookup('objstore', application_id, 'access_key') }}"
|
|
AWS_S3_SECRET_ACCESS_KEY = "{{ lookup('objstore', application_id, 'secret_key') }}"
|
|
AWS_S3_ENDPOINT_URL = "{{ lookup('objstore', application_id, 'url') }}"
|
|
AWS_S3_REGION_NAME = "{{ lookup('objstore', application_id, 'region') }}"
|
|
AWS_S3_ADDRESSING_STYLE = "path"
|
|
AWS_S3_URL_PROTOCOL = "http:"
|
|
{% endif %}
|
|
|
|
{% if TAIGA_OIDC_ENABLED | bool %}
|
|
INSTALLED_APPS += [
|
|
"mozilla_django_oidc",
|
|
"taiga_contrib_oidc_auth",
|
|
]
|
|
|
|
AUTHENTICATION_BACKENDS = list(AUTHENTICATION_BACKENDS) + [
|
|
"taiga_contrib_oidc_auth.oidc.TaigaOIDCAuthenticationBackend",
|
|
]
|
|
|
|
ROOT_URLCONF = "settings.urls"
|
|
|
|
OIDC_CALLBACK_CLASS = "taiga_contrib_oidc_auth.views.TaigaOIDCAuthenticationCallbackView"
|
|
OIDC_RP_CLIENT_ID = "{{ OIDC.CLIENT.ID }}"
|
|
OIDC_RP_CLIENT_SECRET = "{{ OIDC.CLIENT.SECRET }}"
|
|
OIDC_RP_SIGN_ALGO = "RS256"
|
|
OIDC_RP_SCOPES = "openid profile email"
|
|
OIDC_USERNAME_CLAIM = "{{ OIDC.ATTRIBUTES.USERNAME }}"
|
|
OIDC_OP_JWKS_ENDPOINT = "{{ OIDC.CLIENT.CERTS }}"
|
|
OIDC_OP_AUTHORIZATION_ENDPOINT = "{{ OIDC.CLIENT.AUTHORIZE_URL }}"
|
|
OIDC_OP_TOKEN_ENDPOINT = "{{ OIDC.CLIENT.TOKEN_URL }}"
|
|
OIDC_OP_USER_ENDPOINT = "{{ OIDC.CLIENT.USER_INFO_URL }}"
|
|
{% endif %}
|
|
|
|
{% if TAIGA_LDAP_ENABLED | bool %}
|
|
INSTALLED_APPS += ["taiga_contrib_ldap_auth_ext"]
|
|
|
|
LDAP_SERVER = "{{ LDAP.SERVER.URI | regex_replace(':\\d+$', '') }}"
|
|
LDAP_PORT = {{ LDAP.SERVER.PORT }}
|
|
LDAP_START_TLS = {{ 'True' if LDAP.SERVER.SECURITY | upper == 'TLS' else 'False' }}
|
|
LDAP_BIND_DN = "{{ LDAP.DN.ADMINISTRATOR.DATA }}"
|
|
LDAP_BIND_PASSWORD = "{{ LDAP.BIND_CREDENTIAL }}"
|
|
LDAP_SEARCH_BASE = "{{ LDAP.DN.OU.USERS }}"
|
|
LDAP_SEARCH_FILTER_ADDITIONAL = "{{ LDAP.FILTERS.USERS.ALL }}"
|
|
LDAP_USERNAME_ATTRIBUTE = "{{ LDAP.USER.ATTRIBUTES.ID }}"
|
|
LDAP_EMAIL_ATTRIBUTE = "{{ LDAP.USER.ATTRIBUTES.MAIL }}"
|
|
LDAP_FULL_NAME_ATTRIBUTE = "{{ LDAP.USER.ATTRIBUTES.FULLNAME }}"
|
|
LDAP_SAVE_LOGIN_PASSWORD = False
|
|
LDAP_MAP_USERNAME_TO_UID = None
|
|
{% endif %}
|