External idp | new variables for various clients#270
External idp | new variables for various clients#270MannixTT wants to merge 3 commits intoopencloud-eu:mainfrom
Conversation
adapt docker compose for new variables regarding external idp
Update environment variables for new variables regarding external idp settings
adapt defaults - otherwise it will not behave as expected
| # claim_role to opencloud mapping | ||
| OC_OIDC_CLIENT_SCOPES="openid profile email roles offline_access" | ||
| # Unfortunetely needed at the moment (be careful to set it to none in prod) | ||
| # PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD=none |
There was a problem hiding this comment.
this can be misunderstood as being a var you can activate by uncommenting
There was a problem hiding this comment.
I think it should be clear that the vars there are only available when you reference the dockerfile external-idp as mentioned above in this section
| # Unfortunetely needed at the moment (be careful to set it to none in prod) | ||
| # PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD=none | ||
| # Allow OpenCloud, to show Authentik Login-Frame | ||
| PROXY_CSP_CONFIG_FILE_LOCATION="/etc/ocis/csp.yaml" |
There was a problem hiding this comment.
ocis? wouldnt it break csp?
| ldap-server: | ||
| image: bitnamilegacy/openldap:2.6 | ||
| # Bitnami images require GID 0 to write to internal socket and PID directories | ||
| user: ${LDAP_UID_GID:-1000:0} |
There was a problem hiding this comment.
what issue does this fix
There was a problem hiding this comment.
I owned the complete stack with my docker user, but the container isn't able to run rootless.
There was a problem hiding this comment.
I owned the complete stack with my docker user, but the container isn't able to run rootless.
looks like it will help those using rootless. i think you can consider decoupling this fix into a separate pr
I removed legacy environment variables and added the new variables to be able to setup authentik for example.