markup edits

This commit is contained in:
misha
2026-10-13 00:57:12 +02:00
parent bae4a3cf76
commit ea09a70831
+17 -17
View File
@@ -80,31 +80,31 @@ app app secret insert git.example.coop signing_private_key v1 -f ~/.ssh/id_ed255
app app deploy git.example.coop
```
## Set-up Keycloak authentication
## Keycloak integration
This example uses https://git.coop.tech and https://keycloak.coop.tech as an example. Replace them with your own domains:
### Settings in keycloak
### In keycloak
- If you haven't already done so for other services, create a realm.
- Within that realm, create a client.
- Client type = OpenID Connect
- Client ID = forgejo
- Client authentication -> on
- Authorization -> on
- Standard flow -> ✅
- Direct access grants -> ✅
- Valid redirect URIs = https://git.coop.tech/*
- Valid post logout redirect URIs = https://git.coop.tech/*
- Client type = `OpenID Connect`
- Client ID = `forgejo`
- Client authentication ✅
- Authorization ✅
- Standard flow ✅
- Direct access grants ✅
- Valid redirect URIs = `https://git.coop.tech/*`
- Valid post logout redirect URIs = `https://git.coop.tech/*`
- Note the client secret under "clients" -> "credentials"
### Settings in forgejo
### In Forgejo
- Go to https://git.coop.tech/admin
- Go to Identity & access
- Go to Authentication sources
- Authentication type: OAuth2
- OAuth2 provider: OpenID Connect
- Client ID = forgejo
- Go to "Identity & access"
- Go to "Authentication sources"
- Authentication type: `OAuth2`
- OAuth2 provider: `OpenID Connect`
- Client ID = `forgejo`
- Client secret = #see client secrete mentioned above
- OpenID Connect Auto Discovery URL = https://keycloak.coop.tech/realms/<realm name>/.well-known/openid-configuration
- OpenID Connect Auto Discovery URL = `https://keycloak.coop.tech/realms/<realm name>/.well-known/openid-configuration`