20 lines
1.1 KiB
Django/Jinja
20 lines
1.1 KiB
Django/Jinja
PODMAN_ARGS="\
|
|
--name 'cadoles-pod-hydra-v1' \
|
|
--replace \
|
|
--network=slirp4netns:allow_host_loopback=true \
|
|
-p 127.0.0.1:4444:4444 \
|
|
-p 127.0.0.1:4445:4445 \
|
|
--tmpfs /tmp \
|
|
-e 'HYDRA_DSN=mysql://{{ hydra_database_user }}:{{ hydra_database_password }}@tcp({{ hydra_database_host }}:{{ hydra_database_port }})/{{ hydra_database_name }}?parseTime=true' \
|
|
-e 'LOG_LEVEL={{ hydra_log_level }}' \
|
|
-e 'LOG_LEAK_SENSITIVE_VALUES={{ hydra_log_leak_sensitive_values }}' \
|
|
-e 'HYDRA_URLS_SELF_ISSUER={{ hydra_urls_self_issuer_url }}' \
|
|
-e 'HYDRA_URLS_CONSENT={{ hydra_urls_consent }}' \
|
|
-e 'HYDRA_URLS_LOGIN={{ hydra_urls_login }}' \
|
|
-e 'HYDRA_URLS_LOGOUT={{ hydra_urls_logout }}' \
|
|
-e 'HYDRA_ALLOW_INSECURE=yes' \
|
|
-e 'HYDRA_LEVEL={{ hydra_log_level }}' \
|
|
-e 'HYDRA_SECRETS_SYSTEM={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \
|
|
-e 'HYDRA_OIDC_SUBJECT_IDENTIFIERS_PAIRWISE_SALT={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \
|
|
-v /etc/hydra/clients.d:/etc/hydra/clients.d \
|
|
" |