oleksandr/homelab
1
0
Fork 0
Code Issues 1 Pull Requests 5 Activity

feat(k8s/reitti): enable OIDC sign-up and disable local login

Browse Source
This commit is contained in:
oleksandr
2026-10-03 23:43:07 +03:00
parent 498330b752
commit 1577313de5
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kubernetes/app/reitti/deployment.yaml
+5 -6
View File
@@ -61,10 +61,9 @@ spec:
# Tiles are proxied server-side through /api/v1/tiles, so the in-cluster URL works. # Tiles are proxied server-side through /api/v1/tiles, so the in-cluster URL works.
- name: TILES_CACHE - name: TILES_CACHE
value: http://reitti-tile-cache value: http://reitti-tile-cache
# Authentication against Authelia over OIDC (redirect URI /login/oauth2/code/oauth). # Authentication against Authelia over OIDC only (redirect URI /login/oauth2/code/oauth).
# Sign-up is off: an OIDC login links to the local user whose username matches # Unknown Authelia users are auto-created as regular users. With local login disabled,
# preferred_username, so rename the setup admin to match before the first SSO login. # the next SSO login clears the user's local password and syncs the username.
# Local login stays on until that link exists — then set DISABLE_LOCAL_LOGIN=true.
- name: OIDC_ENABLED - name: OIDC_ENABLED
value: "true" value: "true"
- name: OIDC_ISSUER_URI - name: OIDC_ISSUER_URI
@@ -81,9 +80,9 @@ spec:
- name: OIDC_AUTHENTICATION_METHOD - name: OIDC_AUTHENTICATION_METHOD
value: client_secret_basic value: client_secret_basic
- name: OIDC_SIGN_UP_ENABLED - name: OIDC_SIGN_UP_ENABLED
value: "false" value: "true"
- name: DISABLE_LOCAL_LOGIN - name: DISABLE_LOCAL_LOGIN
value: "false" value: "true"
volumeMounts: volumeMounts:
- name: data - name: data
mountPath: /data mountPath: /data