Merge branch 'master' of https://gitea.violin-work.online/violin/violin-iam
continuous-integration/drone/push Build is passing

This commit is contained in:
simple321vip
2026-07-22 22:10:32 +08:00
2 changed files with 24 additions and 20 deletions
+6 -2
View File
@@ -6,6 +6,11 @@ name: build-and-deploy-dev
# clone: # clone:
# disable: true # disable: true
host_aliases:
- ip: "192.168.3.49" # ← 替换为 gitea.violin-work.online 的实际 IP
hostnames:
- gitea.violin-work.online
volumes: volumes:
- name: maven-cache - name: maven-cache
claim: claim:
@@ -29,8 +34,7 @@ steps:
commands: commands:
- mkdir -p /root/.m2 - mkdir -p /root/.m2
- cp /config/settings.xml /root/.m2/settings.xml - cp /config/settings.xml /root/.m2/settings.xml
- ulimit -n 65536 - mvn clean install -U -DskipTests
- MAVEN_OPTS="-Dmaven.watcher.disabled=true" mvn clean install -U -DskipTests
volumes: volumes:
- name: maven-cache - name: maven-cache
path: /root/.m2 path: /root/.m2
+18 -18
View File
@@ -31,24 +31,24 @@ violin:
auth: auth:
exclude-paths: /error exclude-paths: /error
anonymous-message-code: AUTHORIZATION_MISSING anonymous-message-code: AUTHORIZATION_MISSING
iam: iam:
service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller} service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
url: ${VIOLIN_IAM_URL:http://localhost:8080} url: ${VIOLIN_IAM_URL:http://localhost:8080}
context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam} context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:} service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:} service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
profile: ${SPRING_PROFILES_ACTIVE:local} profile: ${SPRING_PROFILES_ACTIVE:local}
oidc: oidc:
client: client:
issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}} issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}} client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}} client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}} redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}} scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
authentik: authentik:
token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:} token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:} userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:} authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
management: management:
endpoints: endpoints: