forked from coop-cloud/authentik
		
	Compare commits
	
		
			3 Commits
		
	
	
		
			6.1.1+2024
			...
			password_b
		
	
	| Author | SHA1 | Date | |
|---|---|---|---|
| 632449ece8 | |||
| 0be7e95f48 | |||
| 4fe52c1e5f | 
@ -30,6 +30,7 @@ steps:
 | 
			
		||||
      SECRET_ADMIN_TOKEN_VERSION: v1
 | 
			
		||||
      SECRET_ADMIN_PASS_VERSION: v1
 | 
			
		||||
      SECRET_EMAIL_PASS_VERSION: v1
 | 
			
		||||
      DB_ENTRYPOINT_VERSION: v1
 | 
			
		||||
trigger:
 | 
			
		||||
  branch:
 | 
			
		||||
    - main
 | 
			
		||||
 | 
			
		||||
@ -1,7 +1,7 @@
 | 
			
		||||
TYPE=authentik
 | 
			
		||||
TIMEOUT=900
 | 
			
		||||
ENABLE_AUTO_UPDATE=true
 | 
			
		||||
# POST_DEPLOY_CMDS="worker set_admin_pass|worker apply_blueprints|worker add_applications"
 | 
			
		||||
# POST_DEPLOY_CMDS="worker worker apply_blueprints|worker add_applications"
 | 
			
		||||
LETS_ENCRYPT_ENV=production
 | 
			
		||||
 | 
			
		||||
DOMAIN=authentik.example.com
 | 
			
		||||
 | 
			
		||||
@ -35,7 +35,6 @@ abra app secret generate -a <app_name>
 | 
			
		||||
abra app undeploy <app_name>
 | 
			
		||||
abra app deploy <app_name>
 | 
			
		||||
abra app cmd <app_name> db rotate_db_pass
 | 
			
		||||
abra app cmd <app_name> app set_admin_pass
 | 
			
		||||
```
 | 
			
		||||
 | 
			
		||||
## Add SSO for Nextcloud
 | 
			
		||||
 | 
			
		||||
							
								
								
									
										27
									
								
								abra.sh
									
									
									
									
									
								
							
							
						
						
									
										27
									
								
								abra.sh
									
									
									
									
									
								
							@ -73,30 +73,7 @@ with open('/tmp/$1', newline='') as file:
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
set_admin_pass() {
 | 
			
		||||
password=$(cat /run/secrets/admin_pass)
 | 
			
		||||
token=$(cat /run/secrets/admin_token)
 | 
			
		||||
/manage.py shell -c """
 | 
			
		||||
akadmin = User.objects.get(username='akadmin')
 | 
			
		||||
akadmin.set_password('$password')
 | 
			
		||||
akadmin.save()
 | 
			
		||||
print('Changed akadmin password')
 | 
			
		||||
 | 
			
		||||
from authentik.core.models import TokenIntents
 | 
			
		||||
key='$token'
 | 
			
		||||
if (token:= Token.objects.filter(identifier='authentik-bootstrap-token').first()):
 | 
			
		||||
    token.key=key
 | 
			
		||||
    token.save()
 | 
			
		||||
    print('Changed authentik-bootstrap-token')
 | 
			
		||||
else:
 | 
			
		||||
    Token.objects.create(
 | 
			
		||||
        identifier='authentik-bootstrap-token',
 | 
			
		||||
        user=akadmin,
 | 
			
		||||
        intent=TokenIntents.INTENT_API,
 | 
			
		||||
        expiring=False,
 | 
			
		||||
        key=key,
 | 
			
		||||
    )
 | 
			
		||||
    print('Created authentik-bootstrap-token')
 | 
			
		||||
""" 2>&1 | quieten
 | 
			
		||||
echo "The set_admin_pass function is depricated"
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
rotate_db_pass() {
 | 
			
		||||
@ -178,7 +155,7 @@ for name, url in applications.items():
 | 
			
		||||
quieten(){
 | 
			
		||||
    # 'SyntaxWarning|version_regex|"http\['
 | 
			
		||||
    # is a workaround to get rid of some verbose syntax warnings, this might be fixed with another version
 | 
			
		||||
    grep -Pv '"level": "(info|debug)"|SyntaxWarning|version_regex|"http\['
 | 
			
		||||
    grep -Pv '"level": "(info|debug)"|SyntaxWarning|version_regex|"http\[|RuntimeWarning:'
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
add_email_templates(){
 | 
			
		||||
 | 
			
		||||
@ -8,6 +8,8 @@ x-env: &env
 | 
			
		||||
    - AUTHENTIK_REDIS__HOST=redis
 | 
			
		||||
    - AUTHENTIK_ERROR_REPORTING__ENABLED
 | 
			
		||||
    - AUTHENTIK_SECRET_KEY=file:///run/secrets/secret_key
 | 
			
		||||
    - AUTHENTIK_BOOTSTRAP_PASSWORD=file:///run/secrets/admin_pass
 | 
			
		||||
    - AUTHENTIK_BOOTSTRAP_TOKEN=file:///run/secrets/admin_token
 | 
			
		||||
    - AUTHENTIK_EMAIL__HOST
 | 
			
		||||
    - AUTHENTIK_EMAIL__PORT
 | 
			
		||||
    - AUTHENTIK_EMAIL__USERNAME
 | 
			
		||||
 | 
			
		||||
		Reference in New Issue
	
	Block a user