Merge branch 'master' of https://gitea.violin-work.online/violin/violin-iam
continuous-integration/drone/push Build is passing
continuous-integration/drone/push Build is passing
This commit is contained in:
+6
-2
@@ -6,6 +6,11 @@ name: build-and-deploy-dev
|
|||||||
# clone:
|
# clone:
|
||||||
# disable: true
|
# disable: true
|
||||||
|
|
||||||
|
host_aliases:
|
||||||
|
- ip: "192.168.3.49" # ← 替换为 gitea.violin-work.online 的实际 IP
|
||||||
|
hostnames:
|
||||||
|
- gitea.violin-work.online
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: maven-cache
|
- name: maven-cache
|
||||||
claim:
|
claim:
|
||||||
@@ -29,8 +34,7 @@ steps:
|
|||||||
commands:
|
commands:
|
||||||
- mkdir -p /root/.m2
|
- mkdir -p /root/.m2
|
||||||
- cp /config/settings.xml /root/.m2/settings.xml
|
- cp /config/settings.xml /root/.m2/settings.xml
|
||||||
- ulimit -n 65536
|
- mvn clean install -U -DskipTests
|
||||||
- MAVEN_OPTS="-Dmaven.watcher.disabled=true" mvn clean install -U -DskipTests
|
|
||||||
volumes:
|
volumes:
|
||||||
- name: maven-cache
|
- name: maven-cache
|
||||||
path: /root/.m2
|
path: /root/.m2
|
||||||
|
|||||||
@@ -31,24 +31,24 @@ violin:
|
|||||||
auth:
|
auth:
|
||||||
exclude-paths: /error
|
exclude-paths: /error
|
||||||
anonymous-message-code: AUTHORIZATION_MISSING
|
anonymous-message-code: AUTHORIZATION_MISSING
|
||||||
iam:
|
iam:
|
||||||
service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
|
service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
|
||||||
url: ${VIOLIN_IAM_URL:http://localhost:8080}
|
url: ${VIOLIN_IAM_URL:http://localhost:8080}
|
||||||
context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
|
context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
|
||||||
service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
|
service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
|
||||||
service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
|
service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
|
||||||
profile: ${SPRING_PROFILES_ACTIVE:local}
|
profile: ${SPRING_PROFILES_ACTIVE:local}
|
||||||
oidc:
|
oidc:
|
||||||
client:
|
client:
|
||||||
issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
|
issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
|
||||||
client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
|
client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
|
||||||
client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
|
client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
|
||||||
redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
|
redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
|
||||||
scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
|
scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
|
||||||
authentik:
|
authentik:
|
||||||
token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
|
token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
|
||||||
userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
|
userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
|
||||||
authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
|
authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
|
||||||
|
|
||||||
management:
|
management:
|
||||||
endpoints:
|
endpoints:
|
||||||
|
|||||||
Reference in New Issue
Block a user