mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-08 11:17:17 +02:00
Kevin Veen-Birkenbach
aaedaab3da
- Removed obsolete Installation.md, TODO.md, 02_debug.yml, 05_oidc.yml and legacy debug enable/disable tasks - Added 01_prep.yml to render debug.php/oidc.php on host side before container start - Introduced _ensure_require.yml for generic require_once management in LocalSettings.php - Renamed 01_install.yml -> 02_install.yml to align with new numbering - Updated docker-compose.yml.j2 to bind-mount mw-local into /opt/mw-local - Adjusted vars/main.yml to define MEDIAWIKI_LOCAL_MOUNT_DIR and MEDIAWIKI_LOCAL_PATH - Templates debug.php.j2 and oidc.php.j2 now gated by MODE_DEBUG and MEDIAWIKI_OIDC_ENABLED - main.yml now orchestrates prep, install, debug, extensions, oidc require, admin consistently Ref: https://chatgpt.com/share/68b57db2-efcc-800f-a733-aca952298437
29 lines
835 B
Django/Jinja
29 lines
835 B
Django/Jinja
<?php
|
||
// ### OIDC (PluggableAuth) – BEGIN (managed by Ansible)
|
||
|
||
{% if MEDIAWIKI_OIDC_ENABLED | bool %}
|
||
|
||
wfLoadExtension( 'PluggableAuth' );
|
||
wfLoadExtension( 'OpenIDConnect' );
|
||
|
||
$wgPluggableAuth_EnableAutoLogin = true;
|
||
$wgPluggableAuth_EnableLocalLogin = false;
|
||
$wgPluggableAuth_ButtonLabel = '{{ MEDIAWIKI_OIDC_BUTTON_TEXT }}';
|
||
|
||
$wgPluggableAuth_Config = [
|
||
[
|
||
'plugin' => 'OpenIDConnect',
|
||
'data' => [
|
||
'providerURL' => '{{ MEDIAWIKI_OIDC_ISSUER }}',
|
||
'clientID' => '{{ MEDIAWIKI_OIDC_CLIENT_ID }}',
|
||
'clientsecret' => '{{ MEDIAWIKI_OIDC_CLIENT_SECRET }}',
|
||
'scope' => [ 'openid', 'profile', 'email' ],
|
||
],
|
||
],
|
||
];
|
||
|
||
$wgOpenIDConnect_UseEmailNameAsUserName = true;
|
||
$wgOpenIDConnect_MigrateUsers = true;
|
||
// ### OIDC (PluggableAuth) – END
|
||
|
||
{% endif %} |