ansible-role-sso/templates/cadoles-pod-hydra-oidc-v1.c...

26 lines
1.1 KiB
Django/Jinja

# {{ ansible_managed }}
PODMAN_ARGS="\
--name 'cadoles-pod-hydra-oidc-v1' \
--replace \
--network=slirp4netns:allow_host_loopback=true \
--tz=local \
-p 127.0.0.1:3004:{{ hydra_oidc_internal_port | default(8080) }} \
-e APP_ENV=prod \
-e 'APP_DEBUG={{ hydra_oidc_debug }}' \
-e 'HYDRA_ADMIN_BASE_URL=http://10.0.2.2:3000' \
-e 'COOKIE_PATH={{ hydra_oidc_cookie_path }}' \
-e 'OIC_AUTHORIZE_ENDPOINT={{ hydra_oidc_authorize_endpoint }}' \
-e 'OIDC_TOKEN_ENDPOINT={{ hydra_oidc_token_endpoint }}' \
-e 'OIDC_USERINFO_ENDPOINT={{ hydra_oidc_userinfo_endpoint }}' \
-e 'OIDC_LOGOUT_ENDPOINT={{ hydra_oidc_logout_endpoint }}' \
-e 'BASE_URL={{ hydra_oidc_base_url }}{{ haproxy_hydra_oidc_base_path }}' \
-e 'REDIRECT_ON_ERROR_URL={{ hydra_oidc_hydra_url_error }}' \
-e 'OIDC_SCOPE={{ hydra_oidc_scope }}' \
-e 'CLIENT_ID={{ hydra_oidc_client_id }}' \
-e 'CLIENT_SECRET={{ hydra_oidc_client_secret }}' \
-e 'TRUSTED_PROXIES=127.0.0.1,10.0.2.0/24' \
{% for key,value in hydra_oidc_additionnal_env.items() %}
-e '{{ key }}={{ value }}' \
{% endfor %}
"