129 lines
3.4 KiB
Bash
129 lines
3.4 KiB
Bash
# == GLOBAL ===============================================================================================================================
|
||
|
||
# ATTENTION
|
||
# si vous souhaiter faire tourner envole sur localhost vous devez ajouter dans votre host = 127.0.0.0 envole.local
|
||
# votre localhost devra aussi disposer d'un certificat
|
||
# si vous changer le web_url penser à modifier envole.local par votre web_url dans volume/keycloak/envole/realm-export.json
|
||
# sinon il vous faudra vous connecter à keycloak pour changer l'url du client envole
|
||
|
||
# RELEASE SYSTEM = linux ou eole si eole le réseau du compose sera supprimé et regénéré à chaque UP
|
||
RELEASE_SYSTEM=linux
|
||
|
||
# GLOBAL
|
||
APP_ENV=PROD
|
||
WEB_URL=envole.local
|
||
PROTOCOLE=https
|
||
|
||
# ADMIN USER
|
||
ADMIN_USER=admin
|
||
ADMIN_PASSWORD=changeme
|
||
|
||
# MASTERIDENTITY
|
||
# SQL or SSO or (to do LDAP)
|
||
MASTERIDENTITY=SQL
|
||
|
||
# AUTHENTIFICATION
|
||
# SQL or CAS (todo LDAP or OPENID)
|
||
MODE_AUTH=CAS
|
||
|
||
# MARIADB
|
||
MARIADB_SERVICE_NAME=mariadb
|
||
MARIADB_ACTIVATE=1
|
||
MARIADB_LOCAL=1
|
||
MARIADB_ROOT_PASSWORD=${ADMIN_PASSWORD}
|
||
MARIADB_USER=user
|
||
MARIADB_PASSWORD=${ADMIN_PASSWORD}
|
||
|
||
# LDAP
|
||
# LDAP_SYNC Si MASTERIDENTITY = SQL permet la synchronisation des utilisateurs SQL vers LDAP
|
||
OPENLDAP_SERVICE_NAME=openldap
|
||
LDAP_ACTIVATE=1
|
||
LDAP_LOCAL=1
|
||
LDAP_TYPE=LDAP
|
||
LDAP_HOST=${OPENLDAP_SERVICE_NAME}
|
||
LDAP_PORT=1389
|
||
LDAP_TLS=0
|
||
LDAP_BASEDN=dc=envole,dc=org
|
||
LDAP_ADMIN_USERNAME=${ADMIN_USER}
|
||
LDAP_USER=cn=${LDAP_ADMIN_USERNAME},${LDAP_BASEDN}
|
||
LDAP_PASSWORD=${ADMIN_PASSWORD}
|
||
LDAP_BASEUSER=ou=users,ou=ninegate,${LDAP_BASEDN}
|
||
LDAP_BASENIVEAU01=ou=niveau01,ou=ninegate,${LDAP_BASEDN}
|
||
LDAP_BASENIVEAU02=ou=niveau02,ou=ninegate,${LDAP_BASEDN}
|
||
LDAP_BASEGROUP=ou=groups,ou=ninegate,${LDAP_BASEDN}
|
||
LDAP_SYNC=1
|
||
LDAP_TEMPLATE=
|
||
LDAP_USERNAME=uid
|
||
LDAP_FIRSTNAME=givenname
|
||
LDAP_LASTNAME=sn
|
||
LDAP_DISPLAYNAME=displayName
|
||
LDAP_EMAIL=mail
|
||
LDAP_MEMBER=memberUid
|
||
LDAP_USER_FILTER="(&(${LDAP_USERNAME}=*)(objectClass=person)(!(description=Computer)))"
|
||
LDAP_LOGIN_FILTER="(&(${LDAP_USERNAME}=%uid)(objectClass=person)(!(description=Computer)))"
|
||
LDAP_GROUP_FILTER="(&(objectClass=posixGroup))"
|
||
SCRIBE_GROUP=1
|
||
SCRIBE_MASTER=1
|
||
OPENLDAPREQNIVEAU01=
|
||
OPENLDAPSYNCHROGROUP=0
|
||
OPENLDAPREQGROUP=
|
||
|
||
# CAS
|
||
KEYCLOAK_SERVICE_NAME=keycloak
|
||
CAS_ACTIVATE=1
|
||
CAS_LOCAL=1
|
||
CAS_USER=${ADMIN_USER}-keycloak
|
||
CAS_PASSWORD=${ADMIN_PASSWORD}-keycloak
|
||
CAS_HOST=${WEB_URL}
|
||
CAS_PORT=443
|
||
CAS_PATH=/auth/realms/envole/protocol/cas
|
||
CAS_URL=${PROTOCOLE}://${CAS_HOST}:${CAS_PORT}
|
||
|
||
# NINEGATE
|
||
NINEGATE_SERVICE_NAME=ninegate
|
||
NINEGATE_ACTIVATE=1
|
||
NINEGATE_LOCAL=1
|
||
NINEGATE_URL=${PROTOCOLE}://${WEB_URL}:9000
|
||
|
||
# NINEGATE
|
||
NEXTCLOUD_SERVICE_NAME=nextcloud
|
||
NEXTCLOUD_ACTIVATE=0
|
||
NEXTCLOUD_LOCAL=1
|
||
NEXTCLOUD_URL=${PROTOCOLE}://${WEB_URL}:9001
|
||
NEXTCLOUD_SAMBA=0
|
||
|
||
# NINEBOARD
|
||
NINEBOARD_SERVICE_NAME=nineboard
|
||
NINEBOARD_ACTIVATE=1
|
||
NINEBOARD_LOCAL=1
|
||
NINEBOARD_URL=${PROTOCOLE}://${WEB_URL}:9002
|
||
|
||
# WORDPRESS
|
||
WORDPRESS_SERVICE_NAME=wordpress
|
||
WORDPRESS_ACTIVATE=1
|
||
WORDPRESS_LOCAL=1
|
||
WORDPRESS_URL=${PROTOCOLE}://${WEB_URL}:9003
|
||
|
||
# ADMINER
|
||
ADMINER_SERVICE_NAME=adminer
|
||
ADMINER_ACTIVATE=0
|
||
ADMINER_LOCAL=1
|
||
ADMINER_URL=${PROTOCOLE}://${WEB_URL}:9100/?server=${MARIADB_SERVICE_NAME}&username=${MARIADB_USER}
|
||
|
||
# PHPLDAPADMIN
|
||
PHPLDAPADMIN_SERVICE_NAME=phpldapadmin
|
||
PHPLDAPADMIN_ACTIVATE=0
|
||
PHPLDAPADMIN_LOCAL=1
|
||
PHPLDAPADMIN_URL=${PROTOCOLE}://${WEB_URL}:9101
|
||
|
||
# GENCONFIG
|
||
GENCONFIG_ACTIVATE=0
|
||
GENCONFIG_URL=${PROTOCOLE}://${WEB_URL}:9102
|
||
|
||
# NINEAPACHE
|
||
NINEAPACHE_SERVICE_NAME=nineapache
|
||
NINEAPACHE_ACTIVATE=0
|
||
NINEAPACHE_LOCAL=1
|
||
NINEAPACHE_URL=${PROTOCOLE}://${WEB_URL}:9102
|
||
|