ansible-role-sso/templates/cadoles-pod-hydra-v1.conf.j2

21 lines
1.1 KiB
Plaintext
Raw Normal View History

2022-07-19 14:26:08 +02:00
PODMAN_ARGS="\
--name 'cadoles-pod-hydra-v1' \
--replace \
--network=slirp4netns:allow_host_loopback=true \
-p 127.0.0.1:4444:4444 \
-p 127.0.0.1:4445:4445 \
--tmpfs /tmp \
2022-08-04 13:49:15 +02:00
--tz=local \
2022-07-19 14:26:08 +02:00
-e 'HYDRA_DSN=mysql://{{ hydra_database_user }}:{{ hydra_database_password }}@tcp({{ hydra_database_host }}:{{ hydra_database_port }})/{{ hydra_database_name }}?parseTime=true' \
2022-07-21 14:19:23 +02:00
-e 'LOG_LEVEL={{ hydra_log_level }}' \
-e 'LOG_LEAK_SENSITIVE_VALUES={{ hydra_log_leak_sensitive_values }}' \
-e 'HYDRA_URLS_SELF_ISSUER={{ hydra_urls_self_issuer_url }}' \
-e 'HYDRA_URLS_CONSENT={{ hydra_urls_consent }}' \
-e 'HYDRA_URLS_LOGIN={{ hydra_urls_login }}' \
-e 'HYDRA_URLS_LOGOUT={{ hydra_urls_logout }}' \
-e 'HYDRA_ALLOW_INSECURE=yes' \
-e 'HYDRA_LEVEL={{ hydra_log_level }}' \
-e 'HYDRA_SECRETS_SYSTEM={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \
-e 'HYDRA_OIDC_SUBJECT_IDENTIFIERS_PAIRWISE_SALT={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \
2022-07-19 14:26:08 +02:00
-v /etc/hydra/clients.d:/etc/hydra/clients.d \
"