kevinveenbirkenbach/computer-playbook
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2025-09-24 11:06:24 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
ff7b7aeb2d7fdf4d6bf5239d3b16f188f47cdfaf
computer-playbook/roles/web-app-keycloak
History
Kevin Veen-Birkenbach 5d1210d651 feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack 
• Add svc-ai category under roles and load it in constructor stage

• Create new 'svc-ai-ollama' role (vars, tasks, compose, meta, README) and dedicated network

• Refactor former AI stack into separate app roles: web-app-flowise and web-app-openwebui

• Add web-app-minio role; adjust config (no central DB), meta (fa-database, run_after), compose networks include, volume key

• Provide user-focused READMEs for Flowise, OpenWebUI, MinIO, Ollama

• Networks: add subnets for web-app-openwebui, web-app-flowise, web-app-minio; rename web-app-ai → svc-ai-ollama

• Ports: rename ai_* keys to web-app-openwebui / web-app-flowise; keep minio_api/minio_console

• Add group_vars/all/17_ai.yml (OLLAMA_BASE_LOCAL_URL, OLLAMA_LOCAL_ENABLED)

• Replace hardcoded include paths with path_join in multiple roles (svc-db-postgres, sys-service, sys-stk-front-proxy, sys-stk-full-stateful, sys-svc-webserver, web-svc-cdn, web-app-keycloak)

• Remove obsolete web-app-ai templates/vars/env; split Flowise into its own role

• Minor config cleanups (CSP flags to {}, central_database=false)

https://chatgpt.com/share/68d15cb8-cf18-800f-b853-78962f751f81
2025-09-22 18:40:20 +02:00
..
config
web: general domain cleanup (canonical/aliases normalization)
2025-09-19 14:51:56 +02:00
filter_plugins
Finished implementation of oauth2 import
2025-08-17 21:59:58 +02:00
meta
Refactor path handling, service conditions and dependencies
2025-08-27 16:19:57 +02:00
schema
Implemented schema/main.yml und config/main.yml file
2025-07-09 02:03:32 +02:00
tasks
feat(ai): introduce dedicated AI roles and wiring; clean up legacy AI stack
2025-09-22 18:40:20 +02:00
templates
Refactor web health checker & domain expectations (filter-based)
2025-09-11 13:58:16 +02:00
users
Restructured users
2025-07-09 02:26:50 +02:00
vars
Refactor LDAP variable schema to use top-level constant LDAP and nested ALL-CAPS keys.
2025-08-28 10:15:48 +02:00
README.md
Replaced .infinito.service and .infinito.timer by SOFTWARE_NAME suffix, optimized LICENSE link and update OIDC Realm and ID conf
2025-08-14 14:39:18 +02:00
TODO.md
Enforce uppercase README.md and TODO.md filenames
2025-08-29 18:11:53 +02:00

README.md

Keycloak

Description

Step into a secure future with Keycloak! This open‐source identity and access management solution offers powerful single sign-on (SSO), multi-factor authentication, and user federation capabilities. With support for industry standards such as SAML and OpenID Connect, Keycloak helps you protect and streamline access to your applications.

Overview

This role deploys Keycloak in a Docker environment, integrating it with a PostgreSQL database and enabling operation behind a reverse proxy such as NGINX. It manages container orchestration and configuration via Docker Compose and environment variable templates, ensuring a secure and scalable identity management solution.

Features

  • Comprehensive Identity Management: Manage users, roles, and permissions across your applications with robust SSO and user federation.
  • Advanced Security Options: Benefit from multi-factor authentication, configurable password policies, and secure session management.
  • Standards Support: Seamlessly integrate with SAML, OpenID Connect, and OAuth2 to support various authentication flows.
  • Scalable and Customizable: Easily tailor settings and scale your Keycloak instance to meet growing demands.

Further Resources

Credits

Developed and maintained by Kevin Veen-Birkenbach.
Learn more at veen.world.

Part of the Infinito.Nexus Project
Licensed under Infinito.Nexus NonCommercial License.