ansible-role-sso/templates/cadoles-pod-hydra-oidc-v1.conf.j2

# {{ ansible_managed }}
PODMAN_ARGS="\
    --name 'cadoles-pod-hydra-oidc-v1' \
    --replace \
    --network=slirp4netns:allow_host_loopback=true \
    --tz=local \
    -p 127.0.0.1:3004:80 \
    -e APP_ENV=prod \
    -e 'APP_DEBUG={{ hydra_oidc_debug }}' \
    -e 'HYDRA_ADMIN_BASE_URL=http://10.0.2.2:3000' \
    -e 'COOKIE_PATH={{ hydra_oidc_cookie_path }}' \
    -e 'OIC_AUTHORIZE_ENDPOINT={{ hydra_oidc_authorize_endpoint }}' \
    -e 'OIDC_TOKEN_ENDPOINT={{ hydra_oidc_token_endpoint }}' \
    -e 'OIDC_USERINFO_ENDPOINT={{ hydra_oidc_userinfo_endpoint }}' \
    -e 'OIDC_LOGOUT_ENDPOINT={{ hydra_oidc_logout_endpoint }}' \
    -e 'BASE_URL={{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}' \
    -e 'REDIRECT_ON_ERROR_URL={{ hydra_urls_error }}'
    -e 'OIDC_SCOPE={{ hydra_oidc_scope }}' \
    -e 'CLIENT_ID_FC={{ hydra_oidc_client_id }}' \
    -e 'CLIENT_SECRET_FC={{ hydra_oidc_client_secret }}' \
    -e 'TRUSTED_PROXIES=127.0.0.1,10.0.2.0/24' \
    {% for key,value in hydra_oidc_additionnal_env.items() %}
    -e '{{ key }}={{ value }}' \
    {% endfor %}
"