coop-cloud/authentik
coop-cloud/authentik
1
2
Fork 4
Code Issues 1 Pull Requests 1 Projects Releases Wiki Activity

fix provider blueprints

Browse Source
This commit is contained in:
Moritz 2024-11-04 15:07:00 +01:00
parent 84f8f5b165
commit 912691844e
12 changed files with 34 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
abra.sh
View File

@ -5,17 +5,17 @@ export FLOW_INVALIDATION_VERSION=v2
export FLOW_RECOVERY_VERSION=v1 export FLOW_RECOVERY_VERSION=v1
export FLOW_TRANSLATION_VERSION=v3 export FLOW_TRANSLATION_VERSION=v3
export SYSTEM_BRAND_VERSION=v4 export SYSTEM_BRAND_VERSION=v4
export NEXTCLOUD_CONFIG_VERSION=v1 export NEXTCLOUD_CONFIG_VERSION=v2
export WORDPRESS_CONFIG_VERSION=v2 export WORDPRESS_CONFIG_VERSION=v3
export MATRIX_CONFIG_VERSION=v1 export MATRIX_CONFIG_VERSION=v2
export WEKAN_CONFIG_VERSION=v3 export WEKAN_CONFIG_VERSION=v4
export VIKUNJA_CONFIG_VERSION=v1 export VIKUNJA_CONFIG_VERSION=v2
export OUTLINE_CONFIG_VERSION=v2 export OUTLINE_CONFIG_VERSION=v3
export KIMAI_CONFIG_VERSION=v1 export KIMAI_CONFIG_VERSION=v2
export ZAMMAD_CONFIG_VERSION=v2 export ZAMMAD_CONFIG_VERSION=v3
export RALLLY_CONFIG_VERSION=v2 export RALLLY_CONFIG_VERSION=v3
export HEDGEDOC_CONFIG_VERSION=v1 export HEDGEDOC_CONFIG_VERSION=v2
export MONITORING_CONFIG_VERSION=v2 export MONITORING_CONFIG_VERSION=v3
export DB_ENTRYPOINT_VERSION=v1 export DB_ENTRYPOINT_VERSION=v1
export PG_BACKUP_VERSION=v2 export PG_BACKUP_VERSION=v2

2
hedgedoc.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "hedgedoc_id" }} client_id: {{ secret "hedgedoc_id" }}
client_secret: {{ secret "hedgedoc_secret" }} client_secret: {{ secret "hedgedoc_secret" }}
client_type: confidential client_type: confidential

2
kimai.yaml.tmpl
View File

@ -12,6 +12,7 @@ entries:
audience: https://{{ env "KIMAI_DOMAIN" }}/auth/saml audience: https://{{ env "KIMAI_DOMAIN" }}/auth/saml
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]] authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
digest_algorithm: http://www.w3.org/2001/04/xmlenc#sha256 digest_algorithm: http://www.w3.org/2001/04/xmlenc#sha256
issuer: https://{{ env "DOMAIN" }} issuer: https://{{ env "DOMAIN" }}
name: Kimai name: Kimai
@ -24,6 +25,7 @@ entries:
- !Find [authentik_providers_saml.samlpropertymapping, [name, "authentik default SAML Mapping: Groups"]] - !Find [authentik_providers_saml.samlpropertymapping, [name, "authentik default SAML Mapping: Groups"]]
- !Find [authentik_providers_saml.samlpropertymapping, [name, "authentik default SAML Mapping: UPN"]] - !Find [authentik_providers_saml.samlpropertymapping, [name, "authentik default SAML Mapping: UPN"]]
session_valid_not_on_or_after: minutes=86400 session_valid_not_on_or_after: minutes=86400
sign_assertion: true
signature_algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 signature_algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
signing_kp: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]] signing_kp: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]]
sp_binding: post sp_binding: post

2
matrix.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "matrix_id" }} client_id: {{ secret "matrix_id" }}
client_secret: {{ secret "matrix_secret" }} client_secret: {{ secret "matrix_secret" }}
client_type: confidential client_type: confidential

2
monitoring.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "monitoring_id" }} client_id: {{ secret "monitoring_id" }}
client_secret: {{ secret "monitoring_secret" }} client_secret: {{ secret "monitoring_secret" }}
client_type: confidential client_type: confidential

2
nextcloud.yaml.tmpl
View File

@ -20,7 +20,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "nextcloud_id" }} client_id: {{ secret "nextcloud_id" }}
client_secret: {{ secret "nextcloud_secret" }} client_secret: {{ secret "nextcloud_secret" }}
client_type: confidential client_type: confidential

2
outline.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "outline_id" }} client_id: {{ secret "outline_id" }}
client_secret: {{ secret "outline_secret" }} client_secret: {{ secret "outline_secret" }}
client_type: confidential client_type: confidential

2
rallly.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "rallly_id" }} client_id: {{ secret "rallly_id" }}
client_secret: {{ secret "rallly_secret" }} client_secret: {{ secret "rallly_secret" }}
client_type: confidential client_type: confidential

2
vikunja.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "vikunja_id" }} client_id: {{ secret "vikunja_id" }}
client_secret: {{ secret "vikunja_secret" }} client_secret: {{ secret "vikunja_secret" }}
client_type: confidential client_type: confidential

2
wekan.yaml.tmpl
View File

@ -25,7 +25,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "wekan_id" }} client_id: {{ secret "wekan_id" }}
client_secret: {{ secret "wekan_secret" }} client_secret: {{ secret "wekan_secret" }}
client_type: confidential client_type: confidential

2
wordpress.yaml.tmpl
View File

@ -8,7 +8,9 @@ entries:
- attrs: - attrs:
access_code_validity: minutes=1 access_code_validity: minutes=1
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
client_id: {{ secret "wordpress_id" }} client_id: {{ secret "wordpress_id" }}
client_secret: {{ secret "wordpress_secret" }} client_secret: {{ secret "wordpress_secret" }}
client_type: confidential client_type: confidential

2
zammad.yaml.tmpl
View File

@ -36,6 +36,7 @@ entries:
audience: https://{{ env "ZAMMAD_DOMAIN" }}/auth/saml/metadata audience: https://{{ env "ZAMMAD_DOMAIN" }}/auth/saml/metadata
authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]] authentication_flow: !Find [authentik_flows.flow, [slug, default-authentication-flow]]
authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]]
invalidation_flow: !Find [authentik_flows.flow, [slug, default-provider-invalidation-flow]]
digest_algorithm: http://www.w3.org/2001/04/xmlenc#sha256 digest_algorithm: http://www.w3.org/2001/04/xmlenc#sha256
issuer: https://{{ env "ZAMMAD_DOMAIN" }}/auth/saml/metadata issuer: https://{{ env "ZAMMAD_DOMAIN" }}/auth/saml/metadata
name: zammad name: zammad
@ -43,6 +44,7 @@ entries:
- !KeyOf zammad_name_mapping - !KeyOf zammad_name_mapping
- !KeyOf zammad_email_mapping - !KeyOf zammad_email_mapping
session_valid_not_on_or_after: minutes=86400 session_valid_not_on_or_after: minutes=86400
sign_assertion: true
signature_algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256 signature_algorithm: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256
signing_kp: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]] signing_kp: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]]
sp_binding: post sp_binding: post