From 937d3c3fa6290084346a8aa798166c912736fc81 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Mon, 13 Nov 2023 18:31:17 +0100 Subject: add role nginx/auth/whawty-sso --- inventory/host_vars/ch-http-proxy.yml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) (limited to 'inventory/host_vars/ch-http-proxy.yml') diff --git a/inventory/host_vars/ch-http-proxy.yml b/inventory/host_vars/ch-http-proxy.yml index 070fbfd6..255dbebe 100644 --- a/inventory/host_vars/ch-http-proxy.yml +++ b/inventory/host_vars/ch-http-proxy.yml @@ -34,3 +34,38 @@ network: acme_directory_server: "{{ acme_directory_server_le_live_v2 }}" + + +whawty_nginx_sso_backends: + chaos-at-home: + port: 1234 + login_url: https://login.chaos-at-home.org/login + +whawty_nginx_sso_logins: + chaos-at-home: + hostname: login.chaos-at-home.org + tls: + certificate_provider: acmetool + certificate_config: + request: + challenge: + http-self-test: false + config: + cookie: + domain: ".chaos-at-home.org" + name: __Secure-chaos-at-home-sso + secure: yes + expire: 23h + keys: + - name: 2023-11 + ed25519: + private-key: "{{ vault_whawty_nginx_sso_login_keys['chaos-at-home']['2023-11'] }}" + auth: + static: + autoreload: yes + web: + listen: 127.0.0.1:1234 + login: + title: "chaoSSO login" + +whawty_nginx_sso_login_static_credentials__chaos-at-home: "{{ vault_whawty_nginx_sso_login_static_credentials['chaos-at-home'] }}" -- cgit v1.2.3