diff --git a/.env.sample b/.env.sample index 5c8da9f..d28e87e 100644 --- a/.env.sample +++ b/.env.sample @@ -65,3 +65,9 @@ COPY_ASSETS="$COPY_ASSETS icon.png|app:/web/dist/assets/icons/" # SECRET_WEKAN_ID_VERSION=v1 # SECRET_WEKAN_SECRET_VERSION=v1 # APP_ICONS="$APP_ICONS wekan:~/.abra/recipes/authentik/icons/wekan.png" + +# COMPOSE_FILE="$COMPOSE_FILE:compose.vikunja.yml" +# VIKUNJA_DOMAIN=vikunja.example.com +# SECRET_VIKUNJA_ID_VERSION=v1 +# SECRET_VIKUNJA_SECRET_VERSION=v1 +# APP_ICONS="$APP_ICONS vikunja:~/.abra/recipes/authentik/icons/vikunja.svg" diff --git a/abra.sh b/abra.sh index e00912a..ccfd17d 100644 --- a/abra.sh +++ b/abra.sh @@ -9,6 +9,7 @@ export NEXTCLOUD_CONFIG_VERSION=v1 export WORDPRESS_CONFIG_VERSION=v1 export MATRIX_CONFIG_VERSION=v1 export WEKAN_CONFIG_VERSION=v1 +export VIKUNJA_CONFIG_VERSION=v1 customize() { if [ -z "$1" ] diff --git a/compose.vikunja.yml b/compose.vikunja.yml new file mode 100644 index 0000000..63ee7ea --- /dev/null +++ b/compose.vikunja.yml @@ -0,0 +1,26 @@ +version: "3.8" +services: + worker: + secrets: + - vikunja_id + - vikunja_secret + environment: + - VIKUNJA_DOMAIN + configs: + - source: vikunja + target: /blueprints/vikunja.yaml + +secrets: + vikunja_id: + external: true + name: ${STACK_NAME}_vikunja_id_${SECRET_VIKUNJA_ID_VERSION} + vikunja_secret: + external: true + name: ${STACK_NAME}_vikunja_secret_${SECRET_VIKUNJA_SECRET_VERSION} + + +configs: + vikunja: + name: ${STACK_NAME}_vikunja_${VIKUNJA_CONFIG_VERSION} + file: vikunja.yaml.tmpl + template_driver: golang diff --git a/icons/vikunja.svg b/icons/vikunja.svg new file mode 100644 index 0000000..a35d56e --- /dev/null +++ b/icons/vikunja.svg @@ -0,0 +1,12 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/vikunja.yaml.tmpl b/vikunja.yaml.tmpl new file mode 100644 index 0000000..c2ff204 --- /dev/null +++ b/vikunja.yaml.tmpl @@ -0,0 +1,43 @@ +version: 1 +metadata: + labels: + blueprints.goauthentik.io/instantiate: "true" + name: vikunja + +entries: + +- attrs: + access_code_validity: minutes=1 + authorization_flow: !Find [authentik_flows.flow, [slug, default-provider-authorization-implicit-consent]] + client_id: {{ secret "vikunja_id" }} + client_secret: {{ secret "vikunja_secret" }} + client_type: confidential + include_claims_in_id_token: true + issuer_mode: per_provider + name: Vikunja + property_mappings: + - !Find [authentik_providers_oauth2.scopemapping, [scope_name, openid]] + - !Find [authentik_providers_oauth2.scopemapping, [scope_name, email]] + - !Find [authentik_providers_oauth2.scopemapping, [scope_name, profile]] + signing_key: !Find [authentik_crypto.certificatekeypair, [name, authentik Self-signed Certificate]] + sub_mode: hashed_user_id + token_validity: days=30 + conditions: [] + id: vikunja_provider + identifiers: + pk: 9995 + model: authentik_providers_oauth2.oauth2provider + state: present + +- attrs: + meta_launch_url: https://{{ env "VIKUNJA_DOMAIN" }} + open_in_new_tab: true + policy_engine_mode: any + provider: !KeyOf vikunja_provider + slug: vikunja + conditions: [] + id: vikunja_application + identifiers: + name: Vikunja + model: authentik_core.application + state: present