26 lines
1.1 KiB
Django/Jinja
26 lines
1.1 KiB
Django/Jinja
# {{ ansible_managed }}
|
|
PODMAN_ARGS="\
|
|
--name 'cadoles-pod-hydra-oidc-v1' \
|
|
--replace \
|
|
--network=slirp4netns:allow_host_loopback=true \
|
|
--tz=local \
|
|
-p 127.0.0.1:3004:{{ hydra_oidc_internal_port | default(8080) }} \
|
|
-e APP_ENV=prod \
|
|
-e 'APP_DEBUG={{ hydra_oidc_debug }}' \
|
|
-e 'HYDRA_ADMIN_BASE_URL=http://10.0.2.2:3000' \
|
|
-e 'COOKIE_PATH={{ hydra_oidc_cookie_path }}' \
|
|
-e 'OIC_AUTHORIZE_ENDPOINT={{ hydra_oidc_authorize_endpoint }}' \
|
|
-e 'OIDC_TOKEN_ENDPOINT={{ hydra_oidc_token_endpoint }}' \
|
|
-e 'OIDC_USERINFO_ENDPOINT={{ hydra_oidc_userinfo_endpoint }}' \
|
|
-e 'OIDC_LOGOUT_ENDPOINT={{ hydra_oidc_logout_endpoint }}' \
|
|
-e 'BASE_URL={{ hydra_oidc_base_url }}{{ haproxy_hydra_oidc_base_path }}' \
|
|
-e 'REDIRECT_ON_ERROR_URL={{ hydra_oidc_hydra_url_error }}' \
|
|
-e 'OIDC_SCOPE={{ hydra_oidc_scope }}' \
|
|
-e 'CLIENT_ID={{ hydra_oidc_client_id }}' \
|
|
-e 'CLIENT_SECRET={{ hydra_oidc_client_secret }}' \
|
|
-e 'TRUSTED_PROXIES=127.0.0.1,10.0.2.0/24' \
|
|
{% for key,value in hydra_oidc_additionnal_env.items() %}
|
|
-e '{{ key }}={{ value }}' \
|
|
{% endfor %}
|
|
"
|