docker-compose environment for the entire v.st system
https://v.st/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
44 lines
944 B
44 lines
944 B
#!/bin/bash
|
|
die() { echo >&2 "$@" ; exit 1 ; }
|
|
|
|
DIRNAME="$(dirname $0)"
|
|
cd "$DIRNAME"
|
|
[ -r env.production ] && source env.production
|
|
[ -r ../env.production ] && source ../env.production
|
|
|
|
cd ../keycloak
|
|
|
|
source env.production
|
|
|
|
sudo docker-compose exec -T keycloak \
|
|
/opt/keycloak/bin/kcadm.sh \
|
|
create clients \
|
|
--user admin \
|
|
--password "$KEYCLOAK_ADMIN_PASSWORD" \
|
|
-r "$REALM" \
|
|
-f - <<EOF || die "unable to create hedgedoc client"
|
|
{
|
|
"clientId": "hedgedoc",
|
|
"rootUrl": "https://$HEDGEDOC_HOSTNAME",
|
|
"adminUrl": "https://$HEDGEDOC_HOSTNAME",
|
|
"redirectUris": [ "https://$HEDGEDOC_HOSTNAME/*" ],
|
|
"webOrigins": [ "https://$HEDGEDOC_HOSTNAME" ],
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "$CMD_OAUTH2_CLIENT_SECRET",
|
|
"defaultClientScopes": [
|
|
"web-origins",
|
|
"acr",
|
|
"profile",
|
|
"roles",
|
|
"id",
|
|
"email"
|
|
],
|
|
"optionalClientScopes": [
|
|
"address",
|
|
"phone",
|
|
"offline_access",
|
|
"microprofile-jwt"
|
|
]
|
|
}
|
|
EOF
|
|
|
|
|