mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 4.8
226d5b5366
plugin/mu_plugin addons declared; daggerhart OIDC + rbac-mapper bridge sso, wp-discourse bridges discourse. Settings absorbed from vars/oidc.yml + vars/discourse.yml (deleted); wp-discourse task uses include_vars for the runtime vault key. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
38 lines
1.3 KiB
YAML
38 lines
1.3 KiB
YAML
---
|
|
enabled: "{{ lookup('config', 'web-app-wordpress', 'services.sso.enabled') | bool }}"
|
|
required: false
|
|
mechanism: plugin
|
|
source: upstream
|
|
bridges:
|
|
- sso
|
|
update:
|
|
monitored: true
|
|
catalog: wordpress-org
|
|
upstream_id: daggerhart-openid-connect-generic
|
|
config:
|
|
oidc_settings:
|
|
client_id: "{{ OIDC.CLIENT.ID }}"
|
|
client_secret: "{{ OIDC.CLIENT.SECRET }}"
|
|
issuer: "{{ OIDC.CLIENT.ISSUER_URL }}"
|
|
endpoint_login: "{{ OIDC.CLIENT.AUTHORIZE_URL }}"
|
|
endpoint_token: "{{ OIDC.CLIENT.TOKEN_URL }}"
|
|
endpoint_userinfo: "{{ OIDC.CLIENT.USER_INFO_URL }}"
|
|
endpoint_jwks: "{{ OIDC.CLIENT.CERTS }}"
|
|
endpoint_end_session: "{{ OIDC.CLIENT.LOGOUT_URL }}"
|
|
login_type: "auto"
|
|
scope: "openid profile email {{ RBAC.GROUP.CLAIM }}"
|
|
create_if_does_not_exist: true
|
|
enforce_privacy: false
|
|
link_existing_users: true
|
|
redirect_on_logout: true
|
|
redirect_user_back: true
|
|
enable_logging: "{{ MODE_DEBUG }}"
|
|
no_sslverify: false
|
|
http_request_timeout: 5
|
|
identity_key: "{{ OIDC.ATTRIBUTES.USERNAME }}"
|
|
nickname_key: "{{ OIDC.ATTRIBUTES.USERNAME }}"
|
|
email_format: "{{ OIDC.ATTRIBUTES.EMAIL }}"
|
|
displayname_format: "{{ OIDC.ATTRIBUTES.GIVEN_NAME }} {{ OIDC.ATTRIBUTES.FAMILY_NAME }}"
|
|
identify_with_username: true
|
|
state_time_limit: 180
|