foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ipsilon: Fix configuration

Browse source
This commit is contained in:
Timo Makinen 2025-03-01 19:09:07 +00:00
parent 5f412a50c5
commit a793f59a33
4 changed files with 37 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
roles/ipsilon/templates/ipsilon-container.service.j2
View file

@ -10,9 +10,9 @@ ExecStart=/usr/bin/podman run \
--rm -p 127.0.0.1:8011:80 \
--name ipsilon \
--env LDAP_* --env IPSILON_*\
--volume={{ tls_certs }}/ca.crt:/etc/ssl/certs/ca.crt:ro \
--volume={{ tls_certs }}/{{ inventory_hostname }}.crt:/etc/ssl/certs/{{ inventory_hostname }}.crt:ro \
--volume={{ tls_private }}/ipsilon.key:/etc/ssl/private/{{ inventory_hostname }}.key:ro \
--volume={{ tls_certs }}/ca.crt:/etc/pki/tls/certs/ca.crt:ro \
--volume={{ tls_certs }}/{{ inventory_hostname }}.crt:/etc/pki/tls/certs/{{ inventory_hostname }}.crt:ro \
--volume={{ tls_private }}/ipsilon.key:/etc/pki/tls/private/{{ inventory_hostname }}.key:ro \
--volume={{ tls_private }}/openidc.key:/etc/ipsilon/openidc.key:ro \
--volume=/etc/ipsilon/openidc-static.conf:/etc/ipsilon/root/openidc-static.conf:rw \
ipsilon:latest

7
roles/ipsilon/templates/ipsilon-container.sysconfig.j2
View file

@ -1,10 +1,11 @@
LDAP_BASEDN="{{ ldap_basedn }}"
LDAP_BINDPW="{{ ipsilon_ldap_pass }}"
IPSILON_DB_USER="ipsilon"
IPSILON_DB_PASS="{{ ipsilon_mysql_pass }}"
IPSILON_DB_HOST="sqldb02.home.foo.sh"
IPSILON_DB_CA="/etc/ssl/certs/ca.crt"
IPSILON_DB_KEY="/etc/ssl/private/{{ inventory_hostname }}.key"
IPSILON_DB_CERT="/etc/ssl/certs/{{ inventory_hostname}}.crt"
IPSILON_DB_CA="{{ tls_certs }}/ca.crt"
IPSILON_DB_KEY="{{ tls_private }}/{{ inventory_hostname }}.key"
IPSILON_DB_CERT="{{ tls_certs }}/{{ inventory_hostname}}.crt"
IPSILON_HOSTNAME="idp.foo.sh"
IPSILON_OPENIDC_KEYID="{{ ipsilon_openidc_keyid }}"
IPSILON_OPENIDC_SALT="{{ ipsilon_openidc_salt }}"

4
roles/ipsilon/templates/openidc-static.conf.j2
View file

@ -15,12 +15,12 @@
{{ client["name"] }} jwks_uri=null
{{ client["name"] }} logo_uri=null
{{ client["name"] }} policy_uri=null
{{ client["name"] }} redirect_uris=["{{ client["redirect_uri"] }}"]
{{ client["name"] }} redirect_uris={{ client["redirect_uris"] | ansible.builtin.to_json }}
{{ client["name"] }} request_uris=[]
{{ client["name"] }} require_auth_time=null
{{ client["name"] }} response_types=["code"]
{{ client["name"] }} subject_type="pairwise"
{{ client["name"] }} sector_identifier_uri=null
{{ client["name"] }} token_endpoint_auth_method="client_secret_post"
{{ client["name"] }} token_endpoint_auth_method="{{ client["token_endpoint_auth_method"] | default("client_secret_post") }}"
{{ client["name"] }} tos_uri=null
{% endfor %}