Compare commits
6 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| fd9bf7f49b | |||
| 9d67f443c3 | |||
| b12276072a | |||
| 04fc582912 | |||
| 537ddf1a0c | |||
| b3149fcdc8 |
@@ -52,11 +52,12 @@ spec:
|
|||||||
mas-oidc.yaml: |
|
mas-oidc.yaml: |
|
||||||
upstream_oauth2:
|
upstream_oauth2:
|
||||||
providers:
|
providers:
|
||||||
- id: authentik
|
- id: 001KKV4EKY7KG98W2M9T806K6A
|
||||||
human_name: Authentik
|
human_name: Authentik
|
||||||
issuer: https://idm.hexor.cy/application/o/matrix/
|
issuer: https://idm.hexor.cy/application/o/matrix/
|
||||||
client_id: "{{ .oauth_client_id }}"
|
client_id: "{{ .oauth_client_id }}"
|
||||||
client_secret: "{{ .oauth_client_secret }}"
|
client_secret: "{{ .oauth_client_secret }}"
|
||||||
|
token_endpoint_auth_method: client_secret_post
|
||||||
scope: "openid profile email"
|
scope: "openid profile email"
|
||||||
claims_imports:
|
claims_imports:
|
||||||
localpart:
|
localpart:
|
||||||
|
|||||||
@@ -35,6 +35,11 @@ synapse:
|
|||||||
password:
|
password:
|
||||||
secret: matrix-postgres-creds
|
secret: matrix-postgres-creds
|
||||||
secretKey: synapse_db_password
|
secretKey: synapse_db_password
|
||||||
|
additional:
|
||||||
|
0-unsafe-locale:
|
||||||
|
config: |
|
||||||
|
database:
|
||||||
|
allow_unsafe_locale: true
|
||||||
media:
|
media:
|
||||||
storage:
|
storage:
|
||||||
size: 20Gi
|
size: 20Gi
|
||||||
@@ -56,9 +61,15 @@ matrixAuthenticationService:
|
|||||||
password:
|
password:
|
||||||
secret: matrix-postgres-creds
|
secret: matrix-postgres-creds
|
||||||
secretKey: mas_db_password
|
secretKey: mas_db_password
|
||||||
## Authentik OIDC upstream provider
|
## Admin policy
|
||||||
additional:
|
additional:
|
||||||
0-oidc:
|
0-admin-policy:
|
||||||
|
config: |
|
||||||
|
policy:
|
||||||
|
data:
|
||||||
|
admin_users:
|
||||||
|
- username: ultradesu
|
||||||
|
1-oidc:
|
||||||
configSecret: matrix-oidc-config
|
configSecret: matrix-oidc-config
|
||||||
configSecretKey: mas-oidc.yaml
|
configSecretKey: mas-oidc.yaml
|
||||||
# nodeSelector:
|
# nodeSelector:
|
||||||
|
|||||||
@@ -195,7 +195,7 @@ oauth_applications = {
|
|||||||
meta_description = "Matrix Chat"
|
meta_description = "Matrix Chat"
|
||||||
meta_icon = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
|
meta_icon = "https://img.icons8.com/ios/100/40C057/matrix-logo.png"
|
||||||
redirect_uris = [
|
redirect_uris = [
|
||||||
"https://matrix.hexor.cy/_matrix/client/unstable/org.matrix.msc2965/auth/upstream/callback",
|
"https://auth.matrix.hexor.cy/upstream/callback/001KKV4EKY7KG98W2M9T806K6A",
|
||||||
]
|
]
|
||||||
meta_launch_url = "https://matrix.hexor.cy"
|
meta_launch_url = "https://matrix.hexor.cy"
|
||||||
client_type = "confidential"
|
client_type = "confidential"
|
||||||
|
|||||||
Reference in New Issue
Block a user