22 lines
1.2 KiB
Django/Jinja
22 lines
1.2 KiB
Django/Jinja
# {{ ansible_managed }}
|
|
PODMAN_ARGS="\
|
|
-p 127.0.0.1:3002:80 \
|
|
--network=slirp4netns:allow_host_loopback=true \
|
|
--replace --name 'cadoles-pod-shibboleth-sp-v3' \
|
|
--tz=local \
|
|
-e 'SP_ENTITY_ID={{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}' \
|
|
-e 'SP_LOG_LEVEL={{ hydra_saml_sp_log_level }}' \
|
|
-e 'IDP_ENTITY_ID={{ hydra_saml_idp_entity_id }}' \
|
|
-e 'IDP_METADATA_URL={{ hydra_saml_idp_metadata_url }}' \
|
|
-e 'APACHE_BACKEND_URL=http://10.0.2.2:3003' \
|
|
-e 'APACHE_FORCE_HTTPS={{ "true" if haproxy_public_base_url.startswith('https') else "false" }}' \
|
|
-e 'SP_HANDLER_BASE_PATH={{ haproxy_hydra_saml_base_path }}' \
|
|
-e 'SP_SESSIONS_REDIRECT_LIMIT=host+allow' \
|
|
-e 'SP_SESSIONS_REDIRECT_ALLOW={{ hydra_saml_allowed_redirects | default([]) | join(' ') }}' \
|
|
-e 'SP_INCLUDE_DEFAULT_ATTRIBUTES_MAPPING={{ hydra_saml_include_sp_default_attributes_mapping }}' \
|
|
-e 'SP_INCLUDE_DEFAULT_ATTRIBUTES_POLICY={{ hydra_saml_include_sp_default_attributes_policy }}' \
|
|
-v '/etc/shibboleth/attribute-map.inc.xml:/etc/shibboleth/attribute-map.inc.xml' \
|
|
-v '/etc/shibboleth/attribute-policy.inc.xml:/etc/shibboleth/attribute-policy.inc.xml' \
|
|
-v '/etc/shibboleth/credentials:/etc/shibboleth/credentials' \
|
|
"
|