Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add OIDC configuration

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-10-31 14:22:11 +00:00
parent a88873dc33
commit ff7e54598d
1 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
roles/ipsilon/templates/configuration.conf
View file

@ -26,6 +26,25 @@ persona issuer domain=id.fedoraproject.org
persona idp key file=/etc/ipsilon/persona.key
{% endif %}
{% if env == 'staging' %}
openidc endpoint url=https://id.stg.fedoraproject.org/openidc/
openidc idp key file=/etc/ipsilon/openidc.stg.key
openidc subject salt={{ ipsilon_stg_openidc_subject_salt }}
{% else %}
openidc endpoint url=https://id.fedoraproject.org/openidc/
openidc idp key file=/etc/ipsilon/openidc.key
openidc subject salt={{ ipsilon_openidc_subject_salt }}
{% endif %}
openid database url=postgresql://{{ ipsilon_db_user }}:{{ ipsilon_db_pass }}@{{ ipsilon_db_host }}/{{ ipsilon_db_openid_name }}
openidc static database url=configfile:///etc/ipsilon/openidc.static.cfg
openidc enabled extensions=
openidc documentation url=https://fedoraproject.org/wiki/Infrastructure/Authentication
openidc policy url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc tos url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc idp sig key id=20161031-sig
openidc allow dynamic client registration=False
openidc default attribute mapping=[["*", "*"], ["timezone", "zoneinfo"], ["_groups", "groups"], [["_extras", "cla"], "cla"], ["fullname", "name"]]
{% if env == 'staging' %}
openid endpoint url=https://id.stg.fedoraproject.org/openid/
openid identity url template=http://%(username)s.id.stg.fedoraproject.org/