Compare commits
16
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
65d7f80924 | ||
|
|
fad2c2ff2a
|
||
|
|
87407cc873 | ||
|
|
1f9e279d36
|
||
|
|
2e1057418d | ||
|
|
e4851a44b8 | ||
|
|
7d9d61d5e1 | ||
|
|
c5f7c04314
|
||
|
|
a3cf595a58 | ||
|
|
4673bde8fe
|
||
|
|
4dc83fff64 | ||
|
|
be0b5a49a2
|
||
|
|
e101069616
|
||
|
|
cbead66277
|
||
|
|
d6c6cd2234 | ||
|
|
8888cfa200
|
@@ -16,6 +16,7 @@ SECRET_SSO_CERT_VERSION=v1
|
||||
# SSO_PROVIDER_URL=https://authentik.example.com/
|
||||
# SSO_SAML_URL=https://authentik.example.com/application/saml/kimai/sso/binding/redirect/
|
||||
# SSO_LOGOUT_URL=https://authentik.example.com/application/saml/kimai/slo/binding/redirect/
|
||||
# SSO_ADMIN_GROUP_NAME=kimai_admin
|
||||
|
||||
# MAILER_URL="smtp://<from>:<password>%3F@<mailserver>:587"
|
||||
# MAILER_FROM="Kimai Notifications noreply@example.com"
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
export ENTRYPOINT_CONF_VERSION=v2
|
||||
export LOCAL_CONF_VERSION=v3
|
||||
export LOCAL_CONF_VERSION=v4
|
||||
|
||||
create_admin () {
|
||||
export DATABASE_URL="$DATABASE_TYPE://$DATABASE_USER:$(cat /run/secrets/db_password)@$DATABASE_HOST/$DATABASE_NAME"
|
||||
|
||||
+3
-2
@@ -1,7 +1,7 @@
|
||||
version: '3.8'
|
||||
services:
|
||||
app:
|
||||
image: kimai/kimai2:apache-2.53.0
|
||||
image: kimai/kimai2:2.64.0
|
||||
environment:
|
||||
- APP_ENV=prod
|
||||
- TRUSTED_HOSTS=localhost|traefik|${DOMAIN}|127.0.0.1
|
||||
@@ -18,6 +18,7 @@ services:
|
||||
- SSO_PROVIDER_URL
|
||||
- SSO_SAML_URL
|
||||
- SSO_LOGOUT_URL
|
||||
- SSO_ADMIN_GROUP_NAME
|
||||
- MAILER_URL
|
||||
- MAILER_FROM
|
||||
volumes:
|
||||
@@ -58,7 +59,7 @@ services:
|
||||
- "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect"
|
||||
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLForceHost=true"
|
||||
- "traefik.http.middlewares.${STACK_NAME}-redirect.headers.SSLHost=${DOMAIN}"
|
||||
- "coop-cloud.${STACK_NAME}.version=1.5.8+apache-2.53.0"
|
||||
- "coop-cloud.${STACK_NAME}.version=1.11.0+2.64.0"
|
||||
- "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
|
||||
db:
|
||||
image: mysql:5.7
|
||||
|
||||
+1
-1
@@ -11,7 +11,7 @@ kimai:
|
||||
attribute: http://schemas.xmlsoap.org/claims/Group
|
||||
mapping:
|
||||
# Insert your roles here (ROLE_USER is added automatically)
|
||||
- { saml: admin.group, kimai: ROLE_SUPER_ADMIN }
|
||||
- { saml: {{ env "SSO_ADMIN_GROUP_NAME" }}, kimai: ROLE_SUPER_ADMIN }
|
||||
- { saml: "authentik Admins", kimai: ROLE_SUPER_ADMIN }
|
||||
connection:
|
||||
# You SAML provider
|
||||
|
||||
@@ -0,0 +1 @@
|
||||
Adds kimai_group as admin group for SSO with authentik
|
||||
Reference in New Issue
Block a user