mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-09-14 14:26:04 +02:00
Kevin Veen-Birkenbach
f576b42579
- Add 02_validation.yml to prevent OIDC+LDAP enabled simultaneously - Introduce _flush_config.yml with switches (OIDC/LDAP/superadmin) - Bootstrap with native+superadmin → create admin → install extensions (superadmin) → enable final auth - Refactor REST vars (XWIKI_REST_BASE, XWIKI_REST_XWIKI, XWIKI_REST_EXTENSION_INSTALL) - Update templates to use switch vars; gate OIDC block in properties - Idempotent REST readiness waits Conversation: https://chatgpt.com/share/68c40c1e-2b3c-800f-b59f-8d37baa9ebb2
23 lines
877 B
Django/Jinja
23 lines
877 B
Django/Jinja
############################################
|
|
# OIDC
|
|
{% if xwiki_oidc_enabled_switch | bool %}
|
|
oidc.provider={{ XWIKI_OIDC_PROVIDER }}
|
|
oidc.endpoint.authorization={{ XWIKI_OIDC_AUTHORIZATION }}
|
|
oidc.endpoint.token={{ XWIKI_OIDC_TOKEN }}
|
|
oidc.endpoint.userinfo={{ XWIKI_OIDC_USERINFO }}
|
|
oidc.endpoint.logout={{ XWIKI_OIDC_LOGOUT }}
|
|
oidc.clientid={{ XWIKI_OIDC_CLIENT_ID }}
|
|
oidc.secret={{ XWIKI_OIDC_CLIENT_SECRET }}
|
|
oidc.scope={{ XWIKI_OIDC_SCOPES }}
|
|
oidc.enableUser=true
|
|
oidc.userinfoclaims={{ XWIKI_OIDC_GROUPS_CLAIM }}
|
|
oidc.groups.claim={{ XWIKI_OIDC_GROUPS_CLAIM }}
|
|
oidc.groups.mapping=XWiki.XWikiAdminGroup={{ XWIKI_OIDC_ADMIN_PROVIDER_GROUP }}
|
|
{% endif %}
|
|
|
|
############################################
|
|
# Distribution Wizard
|
|
# Disable automatic start so REST is reachable during automation
|
|
distribution.automaticStartOnMainWiki=false
|
|
distribution.automaticStartOnWiki=false
|