ab5cc5aaae
- Enable IDM service by removing it from OC_EXCLUDE_RUN_SERVICES - Remove external LDAP configuration from configmap (graph, users, groups) - Built-in IDM will handle user/group storage internally - OIDC auto-provisioning via Pocket ID remains unchanged This allows OpenCloud to save new users using its internal IDM service. Co-Authored-By: Paperclip <noreply@paperclip.ing>
45 lines
1.4 KiB
YAML
45 lines
1.4 KiB
YAML
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: opencloud-config
|
|
namespace: opencloud
|
|
data:
|
|
opencloud.yaml: |
|
|
# OpenCloud Minimal Configuration
|
|
# Only non-default settings - environment variables override these
|
|
# Using built-in IDM for user/group storage instead of external OpenLDAP
|
|
|
|
# Proxy service - OIDC configuration (already in env vars, kept for reference)
|
|
proxy:
|
|
oidc:
|
|
issuer: https://auth.basicstack.de
|
|
insecure: false
|
|
auto_provision_accounts: true
|
|
user_oidc_claim: preferred_username
|
|
enable_basic_auth: false
|
|
|
|
# IDM service user passwords (required when IDM is enabled and /etc/opencloud is read-only)
|
|
idm:
|
|
service_user_passwords:
|
|
admin_password: ${OC_IDM_ADMIN_PASSWORD}
|
|
idm_password: ${OC_IDM_IDM_PASSWORD}
|
|
reva_password: ${OC_IDM_REVA_PASSWORD}
|
|
idp_password: ${OC_IDM_IDP_PASSWORD}
|
|
|
|
# Gateway service - storage configuration
|
|
gateway:
|
|
storage_registry:
|
|
storage_users_mount_id: ${OC_STORAGE_MOUNT_ID}
|
|
|
|
csp.yaml: |
|
|
directives:
|
|
connect-src:
|
|
- "'self'"
|
|
- "blob:"
|
|
- "https://raw.githubusercontent.com/opencloud-eu/awesome-apps/"
|
|
- "https://update.opencloud.eu/"
|
|
- "https://opencloud.basicstack.de"
|
|
- "https://auth.basicstack.de"
|
|
- "wss://opencloud.basicstack.de"
|
|
- "wss://auth.basicstack.de"
|