sevenhill/QSfera
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
15,304 Commits 1 Branch 58 Tags
e6d6d27afab6501e73dfd40b8d23e0560bba7676
Commit Graph
59 Commits
Author SHA1 Message Date
Roman Perekhod 5c549469f8 add banned password list to the default deployments 2023-11-22 15:30:17 +01:00
Ralf Haferkamp 48306cbef3 deployment: Disable username validation for keycloak example 
Set 'GRAPH_USERNAME_MATCH' to 'none'. To accept any username that is
also valid for keycloak.
 2023-09-05 16:51:01 +02:00
Ralf HaferkampandRalf Haferkamp 94d9dd80eb ocis_keycloak: Don't start builtin IDP when using keycloak 2023-05-24 17:12:38 +02:00
Ralf HaferkampandRalf Haferkamp 47f5245f55 ocis_keycloak: Fix deployment example 
After commit 52951b42b0 we need to set PROXY_USER_CS3_CLAIM and
PROXY_USER_OIDC_CLAIM for the keycloak example to still work.

Also update release notes to mentions the changed default.
 2023-05-24 17:12:38 +02:00
Ralf Haferkamp 3baeee3b73 ocis_keycloak: Enable backchannel logout for "web" client 
This enables backchannel logout for the "web" client.

Also this bumps keycloak to 21.1
 2023-04-24 16:02:52 +02:00
Ralf HaferkampandGitHub 087e768f35 ocis_keycloak: Move to role assignment via oidc claim (#5882) 
Use the new PROXY_ROLE_ASSIGNMENT_DRIVER "oidc". This also means we can
now run with OCIS_ADMIN_USER_ID being empty. So that no admin user will
be created on startup and no default role assignment will happen.

By setting GRAPH_ASSIGN_DEFAULT_USER_ROLE to "false", we make sure to
not create the default "user" role assignment when auto provisioning a
user.
 2023-03-20 21:04:37 +01:00
Ralf Haferkamp fdb42af20b Switch to non-legacy keycloak images 
This switches the keycloak service to the more recent quarkus based images. Away
from the legacy wildfly based image.
 2023-01-31 09:17:29 +01:00
Ralf Haferkamp 237d566662 Simplify running with podman 
Allow to adjust the docker socket path used by traefik and the logging driver
so that this example can be more easily used with podman based setups.

With a running podman service ("podman system service --time 0"), this should
basically work:

export DOCKER_SOCKET_PATH="/run/user/1000/podman/podman.sock"
export LOG_DRIVER=journald
docker-compose -H unix:///run/user/1000/podman/podman.sock up
 2023-01-31 09:17:29 +01:00
Willy KloucekandRalf Haferkamp 693857e6b3 improve debugability of deployment examples 2022-11-16 16:56:59 +01:00
Willy Kloucek e69d2e9a06 update deployment examples, especially the wopi example 2022-10-07 09:50:06 +02:00
Willy Kloucek 205f87f987 adapt deployment examples 2022-08-05 14:12:08 +02:00
Willy Kloucek b0b7927e6c add ocis config volume to keycloak deployment example 2022-06-28 09:47:17 +02:00
Willy Kloucek 1ace433e60 remove secrets configuration and demo users from keycloak deployment example 2022-06-21 13:07:22 +02:00
David Christofas 287dc62fcf disable color logging in deployment examples 2022-06-09 10:34:32 +02:00
Christian RichterandRalf Haferkamp e01cdb0590 bump traefik in example deployments 
Signed-off-by: Christian Richter <crichter@owncloud.com>
 2022-06-02 12:32:07 +02:00
Willy Kloucek 98118bae69 fix oidc issuer config in the keycloak example 2022-05-31 11:48:49 +02:00
Ralf HaferkampandRalf Haferkamp 201767c99c Fix autoprovisioning (keycload) deployment example 2022-05-24 17:39:01 +02:00
Michael Barz 3c2bb52228 adopt demo deployment config 2022-04-09 16:17:03 +02:00
Willy Kloucek c68cf322c9 switch to keycloak legacy (Wildfly) for deployment examples 2022-02-22 12:21:19 +01:00
Ralf Haferkamp 286e54f6ce Fix docker-compose ocis_keycloak example 
docker-compose doesn't like bare boolean values in the `environment`
section. From the compose-file docs:
Any boolean values (true, false, yes, no) need to be enclosed in quotes to
ensure they are not converted to True or False by the YML parser.
 2022-01-19 10:58:23 +01:00
Willy Kloucek a99f20f8b0 fix traefik basic auth defaul 2022-01-03 07:49:23 +01:00
Willy Kloucek 6590565a2f introduce OCIS_INSECURE option 2021-11-10 16:55:12 +01:00
Willy Kloucek a6b2ea9895 set insecure options on deployment examples 2021-11-10 16:23:37 +01:00
Willy Kloucek cddb334f80 change default paths for oCIS services 2021-10-19 14:37:20 +02:00
Willy Kloucek de3fefd4dd streamline configuration 2021-10-14 16:10:43 +02:00
Willy Kloucek 2692c7dbf8 document machine auth api key 2021-10-05 14:25:25 +02:00
David ChristofasandGitHub 255a6a27cf Merge pull request #2517 from owncloud/fix_transfer_secrets_examples 
fix STORAGE_TRANSFER_SECRET usage in deployment examples
 2021-09-22 12:32:38 -04:00
Josh SorefandPhil Davis 55667a3ab3 spelling 
Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
 2021-09-20 16:54:29 +05:45
Willy Kloucek 246c2dc15e fix STORAGE_TRANSFER_SECRET usage in deployment examples 2021-09-16 19:06:02 +02:00
Michael BarzandGitHub 1288314946 Merge pull request #2335 from owncloud/document_transfer_secret 
[docs-only] document storage transfer token
 2021-07-29 16:38:03 +02:00
Willy Kloucek 08047e1d83 document storage transfer token 2021-07-29 16:05:25 +02:00
Willy Kloucek bcefff9b8d simplify traefik configuration 2021-07-15 11:00:41 +02:00
Willy Kloucek 2826bdf3bd switch to http internally 2021-05-10 08:54:08 +02:00
Willy Kloucek df3b65b5e8 add wopi server example deployment 2021-05-04 17:39:59 +02:00
Willy Kloucek cae068fe73 fix sharing in keycloak deployment example 2021-02-22 11:30:20 +01:00
Willy KloucekandGitHub dea1fa87a9 Merge pull request #1614 from owncloud/change_secrets_upon_deploy 
change default secrets on deploy
 2021-02-11 11:49:23 +01:00
Willy Kloucek 2efbb13e66 change secrets on deploy 2021-02-10 14:20:38 +01:00
Willy Kloucek 77f2f4f0ba bump traefik version 2021-02-08 14:26:49 +01:00
Willy Kloucek 9e3995ecc9 fix keycloak realm import domain 2021-02-01 13:33:01 +01:00
Willy Kloucek 080d348d19 automatic realm import on startup 2021-01-29 10:49:33 +01:00
Willy Kloucek 5a74c1f49f add import and export 2021-01-29 10:49:33 +01:00
Willy Kloucek aaac06da5b let keycloak serve the well-known/openidconnect 2021-01-29 10:49:33 +01:00
Willy Kloucek 8ed2dedf4c fix ocis-net 2021-01-29 10:49:33 +01:00
Willy KloucekandGitHub eac9e11063 Merge branch 'master' into disable_traefik_dashboard_for_deployment_examples 2021-01-23 10:25:50 +01:00
Willy Kloucek 888bea54ad switch to local log driver 2021-01-22 08:51:20 +01:00
Willy Kloucek 3786104739 disable Traefik dasboard as default for deployment examples 2021-01-21 19:07:55 +01:00
Willy Kloucek 623f98d989 add log rotation to deploy examples 2021-01-21 15:58:52 +01:00
Willy Kloucek c7a620c4d5 add more 2020-12-28 07:36:08 +01:00
Willy Kloucek 3eb9e122a4 remove unneeded settings 2020-12-23 23:36:00 +01:00
Jörn Friedrich Dreyer 7dbc1af76f add OCIS_URL env var 
Signed-off-by: Jörn Friedrich Dreyer <jfd@butonic.de>
 2020-12-21 16:20:02 +00:00