mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-07 05:37:59 +00:00
Kevin Veen-Birkenbach
0bf286f62a
- Added 'font-src data:' to CSP whitelist to allow inline fonts in Admin UI - Refactored init.sh to run as root only for volume permission setup, then drop privileges to www-data - Unified all bash invocations to sh for POSIX compliance - Added missing 'bundles' named volume and mount to Docker Compose - Set init container to run as root (0:0) for permission setup - Added admin user rename step via Ansible task See discussion: https://chatgpt.com/share/69087361-859c-800f-862c-7413350cca3e
27 lines
1.1 KiB
YAML
27 lines
1.1 KiB
YAML
# Replace INFX_OIDC_PLUGIN with the actual plugin name (Composer or local)
|
|
- name: "Install OIDC plugin & activate"
|
|
shell: |
|
|
docker exec -i --user {{ SHOPWARE_USER }} {{ SHOPWARE_WEB_CONTAINER }} sh -lc '
|
|
set -e
|
|
cd {{ SHOPWARE_ROOT }}
|
|
php bin/console plugin:refresh
|
|
php bin/console plugin:install --activate INFX_OIDC_PLUGIN || true
|
|
php bin/console cache:clear
|
|
'
|
|
args:
|
|
chdir: "{{ docker_compose.directories.instance }}"
|
|
|
|
- name: "Configure OIDC via system:config"
|
|
shell: |
|
|
docker exec -i --user {{ SHOPWARE_USER }} {{ SHOPWARE_WEB_CONTAINER }} sh -lc '
|
|
set -e
|
|
cd {{ SHOPWARE_ROOT }}
|
|
php bin/console system:config:set "InfxOidc.config.clientId" "{{ OIDC.CLIENT.ID }}"
|
|
php bin/console system:config:set "InfxOidc.config.clientSecret" "{{ OIDC.CLIENT.SECRET }}"
|
|
php bin/console system:config:set "InfxOidc.config.discoveryUrl" "{{ OIDC.CLIENT.DISCOVERY_DOCUMENT }}"
|
|
php bin/console system:config:set "InfxOidc.config.scopes" "openid profile email"
|
|
php bin/console cache:clear
|
|
'
|
|
args:
|
|
chdir: "{{ docker_compose.directories.instance }}"
|