Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Fix ipsilon config

Browse source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2021-03-24 17:03:58 +01:00
parent 327de7debe
commit be8535cf05
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
1 changed files with 0 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

20
roles/ipsilon/templates/configuration.conf
View file

@ -1,25 +1,9 @@
[login_config] [login_config]
{% if env == "production" %}
global enabled=gssapi,fas
fas FAS url=https://admin{{env_suffix}}.fedoraproject.org/accounts/
fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False
{% else %}
global enabled=gssapi,form global enabled=gssapi,form
{% endif %}
[info_config] [info_config]
{% if env == "production" %}
global enabled=fas
fas FAS url=https://admin{{env_suffix}}.fedoraproject.org/accounts/
fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False
fas Bind Username={{ ipsilon_fasinfo_username }}
fas Bind Password={{ ipsilon_fasinfo_prod_password }}
{% else %}
sssd preconfigured = True sssd preconfigured = True
global enabled = sssd global enabled = sssd
{% endif %}
[authz_config] [authz_config]
global enabled=allow global enabled=allow
@ -27,11 +11,7 @@ global enabled=allow
[provider_config] [provider_config]
global enabled=openid,saml2,openidc global enabled=openid,saml2,openidc
{% if env == "production" %}
openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,src,fpdc,kerneltest openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,src,fpdc,kerneltest
{% else %}
openidc enabled extensions=fedora-account,mbs,beaker,waiverdb,odcs,wiki,src,fpdc,kerneltest
{% endif %}
{% if env == 'staging' %} {% if env == 'staging' %}
openidc subject salt={{ ipsilon_stg_openidc_subject_salt }} openidc subject salt={{ ipsilon_stg_openidc_subject_salt }}