52 lines
1.2 KiB
Django/Jinja
52 lines
1.2 KiB
Django/Jinja
# Dex OIDC provider configuration
|
|
issuer: https://auth.{{ domain }}
|
|
|
|
storage:
|
|
type: sqlite3
|
|
config:
|
|
file: /var/dex/dex.db
|
|
|
|
web:
|
|
http: 0.0.0.0:5556
|
|
|
|
connectors:
|
|
- type: ldap
|
|
id: lldap
|
|
name: LLDAP
|
|
config:
|
|
host: lldap:3890
|
|
insecureNoSSL: true
|
|
bindDN: uid=admin,ou=people,{{ ldap_base_dn }}
|
|
bindPW: "{{ lldap_admin_password }}"
|
|
userSearch:
|
|
baseDN: ou=people,{{ ldap_base_dn }}
|
|
filter: "(objectClass=person)"
|
|
username: uid
|
|
idAttr: uid
|
|
emailAttr: mail
|
|
nameAttr: displayName
|
|
preferredUsernameAttr: uid
|
|
groupSearch:
|
|
baseDN: ou=groups,{{ ldap_base_dn }}
|
|
filter: "(objectClass=groupOfUniqueNames)"
|
|
userMatchers:
|
|
- userAttr: DN
|
|
groupAttr: uniqueMember
|
|
nameAttr: cn
|
|
|
|
staticClients:
|
|
- id: outline
|
|
name: Outline
|
|
secret: "{{ dex_outline_client_secret }}"
|
|
redirectURIs:
|
|
- https://docs.{{ domain }}/auth/oidc.callback
|
|
|
|
- id: gitea
|
|
name: Gitea
|
|
secret: "{{ dex_gitea_client_secret }}"
|
|
redirectURIs:
|
|
- https://git.{{ domain }}/user/oauth2/dex/callback
|
|
|
|
oauth2:
|
|
skipApprovalScreen: true
|