JamesBhattarai
b25c6cd24e
- Plane with OIDC users, projects and VDCs with per-VDC roles, SSH key vault, Cloudflare exposure, TLS certificates, and a gateway that forwards allowlisted calls to core with the VDC as tenant_id. - Also added docker compose for setups
46 lines
1.5 KiB
Bash
46 lines
1.5 KiB
Bash
CLOUD_DATABASE_URL=mysql+pymysql://cloud_user:cloud_password@cloud-db:3306/cloud
|
|
|
|
CORE_API_BASE_URL=http://host.docker.internal:5000
|
|
CORE_API_KEY=change-me-generate-a-real-key
|
|
|
|
FLASK_ENV=development
|
|
|
|
# production (default when unset) | development. Only development allows the
|
|
# auth dev bypass below.
|
|
APP_ENV=production
|
|
|
|
OIDC_ISSUER=https://secuird.tech/
|
|
OIDC_JWKS_URL=
|
|
OIDC_AUDIENCE=change-me-oidc-client-id
|
|
OIDC_ADDITIONAL_AUDIENCES=
|
|
OIDC_SUBJECT_CLAIM=sub
|
|
OIDC_EMAIL_CLAIM=email
|
|
OIDC_ADMIN_GROUP=
|
|
BOOTSTRAP_ADMIN_EMAILS=
|
|
|
|
OIDC_GROUPS_CLAIMS=groups,roles,realm_access.roles,openstack_groups,openstack_project_names,memberOf
|
|
IDP_PROJECT_AUTOCREATE=true
|
|
IDP_PROJECT_GROUP_PATTERN=
|
|
IDP_PROJECT_IGNORED_GROUPS=offline_access,uma_authorization,account,default-roles-*,*/*-realm,everyone,users,authenticated
|
|
IDP_PROJECT_DEFAULT_ROLE=member
|
|
IDP_PROJECT_NAME_TEMPLATE={group_title}
|
|
|
|
OAUTH2_PROXY_CLIENT_ID=change-me-oidc-client-id
|
|
OAUTH2_PROXY_CLIENT_SECRET=change-me
|
|
OAUTH2_PROXY_COOKIE_SECRET=a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6
|
|
OAUTH2_PROXY_REDIRECT_URL=http://localhost:8090/oauth2/callback
|
|
OAUTH2_PROXY_COOKIE_SECURE=false
|
|
OAUTH2_PROXY_UPSTREAMS=http://cloud-api:5001/api/,http://host.docker.internal:8080/
|
|
|
|
# Development only: requests without a token act as LOCAL_USER_EMAIL. On by
|
|
# default when APP_ENV=development; set false there to test real sign-in.
|
|
# Ignored (and logged) in any other APP_ENV.
|
|
AUTH_DEV_BYPASS=
|
|
LOCAL_USER_EMAIL=local@xcloudify.dev
|
|
LOCAL_USER_GROUPS=
|
|
|
|
CLOUD_BROKER_URL=redis://cloud-redis:6379/0
|
|
CLOUD_RESULT_BACKEND=redis://cloud-redis:6379/1
|
|
|
|
CLOUD_SECRET_KEY=
|