79 lines
2.4 KiB
YAML
79 lines
2.4 KiB
YAML
server:
|
|
port: 8080
|
|
servlet:
|
|
context-path: /violin-iam
|
|
shutdown: graceful
|
|
|
|
spring:
|
|
application:
|
|
name: violin-iam
|
|
profiles:
|
|
active: ${SPRING_PROFILES_ACTIVE:local}
|
|
jackson:
|
|
default-property-inclusion: non_null
|
|
date-format: yyyy-MM-dd HH:mm:ss
|
|
time-zone: Asia/Shanghai
|
|
lifecycle:
|
|
timeout-per-shutdown-phase: 30s
|
|
|
|
violin:
|
|
jwt:
|
|
issuer: ${VIOLIN_JWT_ISSUER:violin-iam}
|
|
audience: ${VIOLIN_JWT_AUDIENCE:violin-services}
|
|
expiration-ms: ${VIOLIN_JWT_EXPIRATION_MS:86400000}
|
|
key-id: ${VIOLIN_JWT_KEY_ID:violin-iam-1}
|
|
private-key-path: ${VIOLIN_JWT_PRIVATE_KEY_PATH:}
|
|
public-key-path: ${VIOLIN_JWT_PUBLIC_KEY_PATH:}
|
|
jwks-url: ${VIOLIN_JWT_JWKS_URL:http://localhost:8080/violin-iam/.well-known/jwks.json}
|
|
refresh-seconds: ${VIOLIN_JWT_REFRESH_SECONDS:300}
|
|
clock-skew-seconds: ${VIOLIN_JWT_CLOCK_SKEW_SECONDS:30}
|
|
profile: ${SPRING_PROFILES_ACTIVE:local}
|
|
auth:
|
|
exclude-paths: /error
|
|
anonymous-message-code: AUTHORIZATION_MISSING
|
|
iam:
|
|
service-id: ${VIOLIN_IAM_SERVICE_ID:violin-caller}
|
|
url: ${VIOLIN_IAM_URL:http://localhost:8080}
|
|
context-path: ${VIOLIN_IAM_CONTEXT_PATH:/violin-iam}
|
|
service-token-secret: ${VIOLIN_IAM_SERVICE_TOKEN_SECRET:}
|
|
service-allowlist: ${VIOLIN_IAM_SERVICE_ALLOWLIST:}
|
|
profile: ${SPRING_PROFILES_ACTIVE:local}
|
|
oidc:
|
|
client:
|
|
issuer: ${IAM_OIDC_CLIENT_ISSUER:${AUTHENTIK_ISSUER:}}
|
|
client-id: ${IAM_OIDC_CLIENT_CLIENT_ID:${AUTHENTIK_CLIENT_ID:}}
|
|
client-secret: ${IAM_OIDC_CLIENT_CLIENT_SECRET:${AUTHENTIK_CLIENT_SECRET:}}
|
|
redirect-uri: ${IAM_OIDC_CLIENT_REDIRECT_URI:${AUTHENTIK_REDIRECT_URI:}}
|
|
scope: ${IAM_OIDC_CLIENT_SCOPE:${AUTHENTIK_SCOPE:openid profile email}}
|
|
authentik:
|
|
token-endpoint: ${IAM_OIDC_AUTHENTIK_TOKEN_ENDPOINT:}
|
|
userinfo-endpoint: ${IAM_OIDC_AUTHENTIK_USERINFO_ENDPOINT:}
|
|
authorize-endpoint: ${IAM_OIDC_AUTHENTIK_AUTHORIZE_ENDPOINT:}
|
|
|
|
management:
|
|
endpoints:
|
|
web:
|
|
exposure:
|
|
include: health,prometheus
|
|
endpoint:
|
|
health:
|
|
show-details: never
|
|
probes:
|
|
enabled: true
|
|
group:
|
|
liveness:
|
|
include: livenessState
|
|
readiness:
|
|
include: readinessState,db
|
|
info:
|
|
enabled: false
|
|
info:
|
|
env:
|
|
enabled: false
|
|
keys: []
|
|
|
|
info:
|
|
app:
|
|
name: "@project.name@"
|
|
version: "@project.version@"
|