6 Commits

5 changed files with 23 additions and 11 deletions

View File

@ -9,8 +9,10 @@ LETS_ENCRYPT_ENV=production
SECRET_CLIENT_SECRET_VERSION=v1
NAME=SSO
AUTH_URL=https://example.com/auth/v1/oidc/authorize
CLIENT_ID=tinyauth_id
SCOPES=openid,profile,email
TOKEN_URL=https://example.com/auth/v1/oidc/token
USER_INFO_URL=https://example.com/auth/v1/oidc/userinfo
SESSION_EXPIRY=86400

View File

@ -1,7 +1,7 @@
---
services:
app:
image: ghcr.io/steveiliop56/tinyauth:v4
image: ghcr.io/steveiliop56/tinyauth:v5.0.7
networks:
- proxy
deploy:
@ -15,17 +15,19 @@ services:
- "traefik.http.routers.${STACK_NAME}.tls.certresolver=${LETS_ENCRYPT_ENV}"
- "traefik.http.middlewares.${STACK_NAME}.forwardauth.address=http://${STACK_NAME}_app:3000/api/auth/traefik"
## When you're ready for release, run "abra recipe sync <name>" to set this
- "coop-cloud.${STACK_NAME}.version=1.0.0+v4"
- "coop-cloud.${STACK_NAME}.version=1.0.1+v5.0.7"
environment:
APP_URL: "https://${DOMAIN}"
DISABLE_ANALYTICS: "true"
PROVIDERS_SSO_AUTH_URL: ${AUTH_URL}
PROVIDERS_SSO_CLIENT_ID: ${CLIENT_ID}
PROVIDERS_SSO_CLIENT_SECRET_FILE: /run/secrets/client_secret
PROVIDERS_SSO_REDIRECT_URL: https://${DOMAIN}/api/oauth/callback/sso
PROVIDERS_SSO_SCOPES: ${SCOPES}
PROVIDERS_SSO_TOKEN_URL: ${TOKEN_URL}
PROVIDERS_SSO_USER_INFO_URL: ${USER_INFO_URL}
TINYAUTH_APPURL: "https://${DOMAIN}"
TINYAUTH_ANALYTICS_ENABLED: "true"
TINYAUTH_OAUTH_PROVIDERS_SSO_AUTHURL: ${AUTH_URL}
TINYAUTH_OAUTH_PROVIDERS_SSO_CLIENTID: ${CLIENT_ID}
TINYAUTH_OAUTH_PROVIDERS_SSO_CLIENTSECRETFILE: /run/secrets/client_secret
TINYAUTH_OAUTH_PROVIDERS_SSO_REDIRECTURL: https://${DOMAIN}/api/oauth/callback/sso
TINYAUTH_OAUTH_PROVIDERS_SSO_SCOPES: ${SCOPES}
TINYAUTH_OAUTH_PROVIDERS_SSO_TOKENURL: ${TOKEN_URL}
TINYAUTH_OAUTH_PROVIDERS_SSO_USERINFOURL: ${USER_INFO_URL}
TINYAUTH_OAUTH_PROVIDERS_SSO_NAME: ${NAME:-SSO}
TINYAUTH_AUTH_SESSIONEXPIRY: ${SESSION_EXPIRY:-86400}
secrets:
- client_secret
healthcheck:

1
release/1.0.0+v4 Normal file
View File

@ -0,0 +1 @@
Initial release with single OAuth support

1
release/1.0.1+v5.0.7 Normal file
View File

@ -0,0 +1 @@
Added variables NAME(Provider name in UI) and SESSION_EXPIRY(Session expiry time in seconds). The defaults are "SSO" and one day.

6
renovate.json Normal file
View File

@ -0,0 +1,6 @@
{
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [
"config:recommended"
]
}