22 lines
998 B
Django/Jinja
22 lines
998 B
Django/Jinja
# {{ ansible_managed }}
|
|
PODMAN_ARGS="\
|
|
--name 'cadoles-pod-hydra-oidc-v1' \
|
|
--replace \
|
|
--network=slirp4netns:allow_host_loopback=true \
|
|
--tz=local \
|
|
-p 127.0.0.1:3004:80 \
|
|
-e APP_ENV=prod \
|
|
-e 'APP_DEBUG={{ hydra_oidc_debug }}' \
|
|
-e 'HYDRA_ADMIN_BASE_URL=http://10.0.2.2:4445' \
|
|
-e 'COOKIE_PATH={{ hydra_oidc_cookie_path }}' \
|
|
-e 'OIC_AUTHORIZE_ENDPOINT={{ hydra_oidc_authorize_endpoint }}' \
|
|
-e 'OIDC_TOKEN_ENDPOINT={{ hydra_oidc_token_endpoint }}' \
|
|
-e 'OIDC_USERINFO_ENDPOINT={{ hydra_oidc_userinfo_endpoint }}' \
|
|
-e 'OIDC_LOGOUT_ENDPOINT={{ hydra_oidc_logout_endpoint }}' \
|
|
-e 'POST_LOGOUT_REDIRECT_URL={{ hydra_oidc_post_logout_redirect_url }}' \
|
|
-e 'BASE_URL={{ haproxy_public_base_url }}{{ haproxy_hydra_oidc_base_path }}' \
|
|
-e 'OIDC_SCOPE={{ hydra_oidc_scope }}' \
|
|
-e 'CLIENT_ID_FC={{ hydra_oidc_client_id }}' \
|
|
-e 'CLIENT_SECRET_FC={{ hydra_oidc_client_secret }}' \
|
|
-e 'TRUSTED_PROXIES=127.0.0.1,10.0.2.0/24' \
|
|
" |