admin: Generate Vouch-Proxy config

This commit is contained in:
nemunaire 2024-03-23 18:51:53 +01:00
commit 24e825d500
5 changed files with 96 additions and 16 deletions

View file

@ -276,19 +276,10 @@ services:
- name: vouch-proxy
image: quay.io/vouch/vouch-proxy:alpine-0.39
env:
- VOUCH_ALLOWALLUSERS=true
- VOUCH_COOKIE_DOMAIN=live.fic.srs.epita.fr
- VOUCH_DOCUMENT_ROOT=/challenge_access
- VOUCH_LOGLEVEL=debug
- OAUTH_PROVIDER=oidc
- OAUTH_CLIENT_ID=epita-challenge
- OAUTH_CLIENT_SECRET=N4n7AXzK9kpXt3TmSn8wAgtxqxhGORgcubLaE2g
- OAUTH_CALLBACK_URL=https://live.fic.srs.epita.fr/challenge_access/auth
- OAUTH_AUTH_URL=https://live.fic.srs.epita.fr/auth
- OAUTH_TOKEN_URL=http://127.0.0.1:5556/token
- OAUTH_USER_INFO_URL=http://127.0.0.1:5556/userinfo
- OAUTH_SCOPES=openid,email
- VOUCH_CONFIG=/etc/vouch/config.yml
net: /run/netns/auth
binds:
- /var/lib/fic/pki/shared/vouch-config.yaml:/etc/vouch/config.yml:ro
files: