fix: correc domain name for keycloak according to the subject
This commit is contained in:
parent
09dbbe46b7
commit
7ef624d74b
|
|
@ -78,7 +78,7 @@ ssh-copy-id -p 2222 bapasqui@localhost
|
|||
|
||||
## for peertube
|
||||
What you need to do in Keycloak
|
||||
1. Go to https://keycloak.chatons.duckdns.org > Admin Console
|
||||
1. Go to https://auth.chatons.duckdns.org > Admin Console
|
||||
2. Create realm chatons (if it doesn't exist)
|
||||
3. Go to Clients > Create client:
|
||||
- Client type: OpenID Connect
|
||||
|
|
|
|||
3
core/caddy/config/sites/auth.caddy
Normal file
3
core/caddy/config/sites/auth.caddy
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
auth.chatons.duckdns.org {
|
||||
reverse_proxy keycloak:8080
|
||||
}
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
keycloak.chatons.duckdns.org {
|
||||
reverse_proxy keycloak:8080
|
||||
}
|
||||
|
|
@ -49,7 +49,7 @@ outils.chatons.duckdns.org {
|
|||
<li><a href="https://cloud.chatons.duckdns.org">Nextcloud</a></li>
|
||||
<li><a href="https://peertube.chatons.duckdns.org">Nextcloud</a></li>
|
||||
<li><a href="https://vogsphere.chatons.duckdns.org">Gitea</a></li>
|
||||
<li><a href="https://keycloak.chatons.duckdns.org">Keycloak</a></li>
|
||||
<li><a href="https://auth.chatons.duckdns.org">Keycloak</a></li>
|
||||
<li><a href="https://diagrams.chatons.duckdns.org">Diagrams</a></li>
|
||||
</ul>
|
||||
</body>
|
||||
|
|
|
|||
|
|
@ -2,18 +2,18 @@ services:
|
|||
keycloak:
|
||||
image: quay.io/keycloak/keycloak
|
||||
container_name: keycloak
|
||||
ports:
|
||||
- 8080
|
||||
expose:
|
||||
- "8080"
|
||||
networks:
|
||||
- proxy
|
||||
env_file:
|
||||
- runtime.env
|
||||
environment:
|
||||
KC_DB: postgres
|
||||
KC_DB_URL: jdbc:postgresql://postgres:3212/keycloak
|
||||
KC_DB_USERNAME: bapasqui
|
||||
KC_DB_PASSWORD: ${KC_DB_PASSWORD}
|
||||
KC_BOOTSTRAP_ADMIN_USERNAME: ${KC_BOOTSTRAP_ADMIN_USERNAME}
|
||||
KC_BOOTSTRAP_ADMIN_PASSWORD: ${KC_BOOTSTRAP_ADMIN_PASSWORD}
|
||||
KC_HOSTNAME: https://keycloak.chatons.duckdns.org
|
||||
KC_HOSTNAME: https://auth.chatons.duckdns.org
|
||||
KC_HEALTH_ENABLED: "true"
|
||||
command:
|
||||
- start-dev
|
||||
restart: unless-stopped
|
||||
|
|
|
|||
3
core/keycloak/runtime.env
Normal file
3
core/keycloak/runtime.env
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
KC_DB_PASSWORD=password
|
||||
KC_BOOTSTRAP_ADMIN_USERNAME=admin
|
||||
KC_BOOTSTRAP_ADMIN_PASSWORD=admin
|
||||
|
|
@ -22,7 +22,7 @@ services:
|
|||
- PEERTUBE_SECRET=${PEERTUBE_SECRET}
|
||||
- PEERTUBE_ADMIN_EMAIL=${PEERTUBE_ADMIN_EMAIL}
|
||||
- PT_INITIAL_ROOT_PASSWORD=${PT_INITIAL_ROOT_PASSWORD}
|
||||
- PEERTUBE_PLUGIN_AUTH_OPENID_CONNECT_DISCOVER_URL=https://keycloak.chatons.duckdns.org/realms/chatons/.well-known/openid-configuration
|
||||
- PEERTUBE_PLUGIN_AUTH_OPENID_CONNECT_DISCOVER_URL=https://auth.chatons.duckdns.org/realms/chatons/.well-known/openid-configuration
|
||||
- PEERTUBE_PLUGIN_AUTH_OPENID_CONNECT_CLIENT_ID=peertube
|
||||
- PEERTUBE_PLUGIN_AUTH_OPENID_CONNECT_CLIENT_SECRET=${PEERTUBE_OIDC_CLIENT_SECRET}
|
||||
- PEERTUBE_PLUGIN_AUTH_OPENID_CONNECT_SCOPE=openid profile email
|
||||
|
|
|
|||
Loading…
Reference in a new issue