mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-31 02:10:05 +00:00
Kevin Veen-Birkenbach
7ca8b7c71d
config(ports): add Nextcloud websocket port (4003); canonical domains (nextcloud/talk/whiteboard) refactor: unify get_app_conf usage & Jinja spacing; migrate paths/handlers to new NEXTCLOUD_* vars feat(plugins): split plugin routines; configure Whiteboard via occ (URL + JWT) fix(oidc): use NEXTCLOUD_URL for logout; correct LDAP attribute mappings; add OIDC flavor switch feat: Whiteboard container & reverse-proxy location; Talk STUN/WS ports; Redis URL for Whiteboard chore: drop obsolete TODO; minor cleanups in oauth2-proxy, matrix, peertube, pgadmin, phpldapadmin, pixelfed, phpmyadmin security(schema): Bluesky jwt_secret now base64_prefixed_32; add Nextcloud whiteboard_jwt_secret db: normalize postgres image tag templating; central DB host checks spacing fixes ops: add full-stack bootstrap (certs, proxy, volumes); internal nginx config reload handler update refs: https://chatgpt.com/share/68b5f5b7-8d64-800f-b001-1241f818dc0e
184 lines
4.2 KiB
YAML
184 lines
4.2 KiB
YAML
plugin_configuration:
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "background_sync_interval"
|
|
configvalue: 43200
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "background_sync_offset"
|
|
configvalue: 0
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "background_sync_prefix"
|
|
configvalue: "s01"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "enabled"
|
|
configvalue: "yes"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01last_jpegPhoto_lookup"
|
|
configvalue: 0
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_backup_port"
|
|
configvalue: "{{ ports.localhost.ldap['svc-db-openldap'] }}" # This is just optimized for local port @todo implement for external ports as well
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_base"
|
|
configvalue: "{{ LDAP.DN.ROOT }}"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_base_groups"
|
|
configvalue: "{{ LDAP.DN.ROOT }}"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_base_users"
|
|
configvalue: "{{LDAP.DN.OU.USERS}}"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_cache_ttl"
|
|
configvalue: 600
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_configuration_active"
|
|
configvalue: 1
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_connection_timeout"
|
|
configvalue: 15
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_display_name"
|
|
configvalue: "cn"
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_dn"
|
|
configvalue: "{{LDAP.DN.ADMINISTRATOR.DATA}}"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_email_attr"
|
|
configvalue: "mail"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_experienced_admin"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_gid_number"
|
|
configvalue: "gidNumber"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_group_display_name"
|
|
configvalue: "cn"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_group_filter"
|
|
configvalue: "(&(|(objectclass=groupOfUniqueNames)(objectclass=posixGroup)))"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_group_filter_mode"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_group_member_assoc_attribute"
|
|
configvalue: "uniqueMember"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_groupfilter_objectclass"
|
|
configvalue: "groupOfUniqueNames\nposixGroup"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_host"
|
|
configvalue: "{{ LDAP.SERVER.DOMAIN }}"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_login_filter"
|
|
configvalue: "{{ LDAP.FILTERS.USERS.LOGIN }}"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_login_filter_mode"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_loginfilter_email"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_loginfilter_username"
|
|
configvalue: 1
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_mark_remnants_as_disabled"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_matching_rule_in_chain_state"
|
|
configvalue: "unknown"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_nested_groups"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_paging_size"
|
|
configvalue: 500
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_port"
|
|
configvalue: 389
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_turn_off_cert_check"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_turn_on_pwd_change"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_user_avatar_rule"
|
|
configvalue: "default"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_user_filter_mode"
|
|
configvalue: 0
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_userfilter_objectclass"
|
|
configvalue: "inetOrgPerson"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_userlist_filter"
|
|
configvalue: |-
|
|
{% if applications | get_app_conf(application_id, 'plugins.user_ldap.user_directory.enabled', True) %}
|
|
{{ LDAP.FILTERS.USERS.ALL }}
|
|
{% else %}
|
|
()
|
|
{% endif %}
|
|
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01use_memberof_to_detect_membership"
|
|
configvalue: 1
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "types"
|
|
configvalue: "authentication"
|
|
-
|
|
appid: "user_ldap"
|
|
configkey: "s01ldap_expert_username_attr"
|
|
configvalue: "{{ LDAP.USER.ATTRIBUTES.ID }}" |