cnst/cnix
1
0
Fork 0
Code Issues Pull Requests Activity

feat(cloud): small change

Browse Source
This commit is contained in:
cnst
2025-09-16 15:40:52 +02:00
parent 73960162b0
commit 0d447771eb
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/server/ocis/default.nix
View File

@@ -131,7 +131,7 @@ in {
in { in {
PROXY_AUTOPROVISION_ACCOUNTS = "true"; PROXY_AUTOPROVISION_ACCOUNTS = "true";
PROXY_ROLE_ASSIGNMENT_DRIVER = "oidc"; PROXY_ROLE_ASSIGNMENT_DRIVER = "oidc";
OCIS_OIDC_ISSUER = "https://${srv.keycloak.url}/realms/master"; OCIS_OIDC_ISSUER = "https://${srv.keycloak.url}/realms/OpenCloud";
PROXY_OIDC_REWRITE_WELLKNOWN = "true"; PROXY_OIDC_REWRITE_WELLKNOWN = "true";
WEB_OIDC_CLIENT_ID = "ocis"; WEB_OIDC_CLIENT_ID = "ocis";
OCIS_LOG_LEVEL = "error"; OCIS_LOG_LEVEL = "error";
@@ -144,10 +144,9 @@ in {
GRAPH_ASSIGN_DEFAULT_USER_ROLE = "false"; GRAPH_ASSIGN_DEFAULT_USER_ROLE = "false";
PROXY_CSP_CONFIG_FILE_LOCATION = toString (cspFormat.generate "csp.yaml" cspConfig); PROXY_CSP_CONFIG_FILE_LOCATION = toString (cspFormat.generate "csp.yaml" cspConfig);
GRAPH_USERNAME_MATCH = "none"; GRAPH_USERNAME_MATCH = "none";
# PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD = "none";
PROXY_ROLE_ASSIGNMENT_ENABLED = "true"; PROXY_ROLE_ASSIGNMENT_ENABLED = "true";
PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM = "realm_access.roles"; PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM = "realm_access.roles";
PROXY_ROLE_ASSIGNMENT_MAPPING = "ocisAdmin:admin,cnst:user"; PROXY_ROLE_ASSIGNMENT_MAPPING = "ocisAdmin:admin,ocisUser:user";
}; };
}; };
}; };