Files
computer-playbook/roles/web-app-syncope
Kevin Veen-Birkenbach 231fd567b3 feat(frontend): rename inj roles to sys-front-*, add sys-svc-cdn, cache-busting lookup
Introduce sys-svc-cdn (cdn_paths/cdn_urls/cdn_dirs) and ensure CDN directories + latest symlink.

Rename sys-srv-web-inj-* → sys-front-inj-*; update includes/templates; serve shared/per-app CSS & JS via CDN.

Add lookup_plugins/local_mtime_qs.py for mtime-based cache busting; split CSS into default.css/bootstrap.css + optional per-app style.css.

CSP: use style-src-elem; drop unsafe-inline for styles. Services: fix SYS_SERVICE_ALL_ENABLED bool and controlled flush.

BREAKING CHANGE: role names changed; replace includes and references accordingly.

Conversation: https://chatgpt.com/share/68b55494-9ec4-800f-b559-44707029141d
2025-09-01 10:10:23 +02:00
..

Syncope (DRAFT)

🔥 Description

Apache Syncope is a powerful and flexible open-source system for managing digital identities in enterprise environments. It offers Identity Governance and Administration (IGA) capabilities, including user provisioning, role management, auditing, workflow integration, and more. Syncope is designed to handle complex identity life cycles across multiple systems, both on-premise and in the cloud.

This role deploys Apache Syncope using Docker Compose, automating the setup of its core services, database, and reverse proxy integration.

📖 Overview

Optimized for Archlinux, this role brings up a fully functional Syncope stack based on the official Docker Compose samples. It includes all core components like Syncope Core, Console, and Enduser, with secure environment management and HTTPS integration.

Key Features

  • Complete Identity Management: Centralized user, group, and policy management.
  • Extensible Architecture: Integrates easily with external identity providers (LDAP, Active Directory, etc.).
  • Modern Interfaces: Provides REST APIs and web consoles for administrators and end-users.
  • Open Standards Support: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM.

🎯 Purpose

The Syncope (Docker Deployment) role provides a fully automated environment for testing, development, or production setups of Apache Syncope, simplifying the complexities of IAM deployment.

🚀 Features

  • PostgreSQL Database Setup: Integrated database management for Syncope.
  • Syncope Core + Console + Enduser Deployment: All critical services brought up automatically.
  • Nginx Reverse Proxy with SSL: Secured access with HTTPS termination.
  • Credential and Secrets Management: Handles sensitive user credentials securely.
  • Customizable Paths and Environment: Easy adjustment for your domain and access paths.

🔗 Learn More