flipdot/paperless-formula
23
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

WIP: Use keycloak for sso

Browse source
This commit is contained in:
rfl 2024-10-02 13:02:56 +02:00
parent 39c6d0e819
commit 4cf8c5c7d4
Signed by: rfl
GPG key ID: 48B0E5DDF8FA62EF
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
paperless/init.sls
View file

@ -67,6 +67,9 @@ paperless-docker-container-running:
# - PAPERLESS_ENABLE_HTTP_REMOTE_USER_API={{ salt['pillar.get']('', 'false') }}
# - PAPERLESS_SECRET_KEY={{ salt['pillar.get']('paperless:webserver:environment:secret_key', 'change-me') }}
# - PAPERLESS_URL={{ salt['pillar.get']('paperless:webserver:environment:url', 'https://paperless.flipdot.org') }}
- PAPERLESS_APPS="allauth.socialaccount.providers.openid_connect"
- PAPERLESS_SOCIALACCOUNT_PROVIDERS='{"openid_connect": {"APPS": [{"provider_id": "keycloak", "name": "Keycloak", "client_id": "paperless", "secret": {{ salt['pillar.get']('paperless:webserver:keycloak:client_secret', '<CLIENT_SECRET>') }}, "settings": {"server_url": {{ salt['pillar.get']('paperless:webserver:keycloak:server_url', 'https://<KEYCLOAK_SERVER>/realms/<REALM>/.well-known/openid-configuration') }} }}]}}'
- restart: always
- networks:
- paperless-network