mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-11 21:07:16 +02:00
Kevin Veen-Birkenbach
6418a462ec
- LDAP: move settings to xwiki.cfg; enable trylocal (1/0), group_mapping to XWiki.XWikiAdminGroup, and mode_group_sync=always. - OIDC: add groups claim request (oidc.userinfoclaims), map provider group to XWiki.XWikiAdminGroup, and use space-separated scopes. - Compose: mount xwiki.cfg and xwiki.properties into /usr/local/xwiki. - Extensions: wait for REST readiness; pre-check OIDC/LDAP extensions (URL-encoded IDs); install via REST job only if missing. - Vars: strict mappings to LDAP.* and OIDC.* (no defaults), add XWIKI_ADMIN_GROUP and derived DNs. - Config: expose ldap.local_enabled; tidy meta tags; README grammar update. Conversation: https://chatgpt.com/share/68c2b8ad-4814-800f-b377-065f967998db
34 lines
674 B
YAML
34 lines
674 B
YAML
credentials: {}
|
|
docker:
|
|
services:
|
|
redis:
|
|
enabled: false
|
|
database:
|
|
enabled: true
|
|
xwiki:
|
|
image: xwiki
|
|
version: stable-mariadb-tomcat
|
|
name: xwiki
|
|
backup:
|
|
no_stop_required: true
|
|
volumes:
|
|
data: "xwiki_data"
|
|
features:
|
|
matomo: true
|
|
css: true
|
|
desktop: true
|
|
central_database: true
|
|
logout: true
|
|
oidc: true
|
|
server:
|
|
csp:
|
|
whitelist: {}
|
|
flags: {}
|
|
domains:
|
|
canonical:
|
|
- "x.wiki.{{ PRIMARY_DOMAIN }}"
|
|
rbac:
|
|
roles: {}
|
|
ldap:
|
|
local_enabled: true # Allows local login if LDAP is down
|