fix: support configurable tfa service
continuous-integration/drone/push Build is failing Details

This commit is contained in:
decentral1se 2021-10-14 00:43:38 +02:00
parent 2c9e980809
commit 3048d09cd8
No known key found for this signature in database
GPG Key ID: 5E2EF5A63E3718CC
4 changed files with 4 additions and 2 deletions

View File

@ -52,6 +52,7 @@ COMPOSE_FILE="compose.yml"
## Enable Keycloak ## Enable Keycloak
#COMPOSE_FILE="$COMPOSE_FILE:compose.keycloak.yml" #COMPOSE_FILE="$COMPOSE_FILE:compose.keycloak.yml"
#KEYCLOAK_MIDDLEWARE_ENABLED=1 #KEYCLOAK_MIDDLEWARE_ENABLED=1
#KEYCLOAK_TFA_SERVICE=traefik-forward-auth_app
##################################################################### #####################################################################
# Prometheus metrics # # Prometheus metrics #

View File

@ -1,3 +1,3 @@
export TRAEFIK_YML_VERSION=v12 export TRAEFIK_YML_VERSION=v12
export FILE_PROVIDER_YML_VERSION=v2 export FILE_PROVIDER_YML_VERSION=v3
export ENTRYPOINT_VERSION=v2 export ENTRYPOINT_VERSION=v2

View File

@ -8,3 +8,4 @@ services:
- "traefik.http.routers.traefik.middlewares=keycloak@file" - "traefik.http.routers.traefik.middlewares=keycloak@file"
environment: environment:
- KEYCLOAK_MIDDLEWARE_ENABLED - KEYCLOAK_MIDDLEWARE_ENABLED
- KEYCLOAK_TFA_SERVICE

View File

@ -4,7 +4,7 @@ http:
{{ if eq (env "KEYCLOAK_MIDDLEWARE_ENABLED") "1" }} {{ if eq (env "KEYCLOAK_MIDDLEWARE_ENABLED") "1" }}
keycloak: keycloak:
forwardAuth: forwardAuth:
address: "http://traefik-forward-auth:4181" address: "http://{{ env "KEYCLOAK_TFA_SERVICE" }}:4181"
trustForwardHeader: true trustForwardHeader: true
authResponseHeaders: authResponseHeaders:
- X-Forwarded-User - X-Forwarded-User