39 lines
1.4 KiB
Terraform
39 lines
1.4 KiB
Terraform
|
module "seafileclient" {
|
||
|
|
source = "./modules/kc-client"
|
||
|
|
|
||
|
|
realm = var.realm
|
||
|
|
client_id = "seafile"
|
||
|
|
client_name = "Seafile"
|
||
|
|
description = "files.unruhig.eu"
|
||
|
|
root_url = "https://files.unruhig.eu"
|
||
|
|
admin_url = "https://files.unruhig.eu"
|
||
|
|
base_url = ""
|
||
|
|
valid_redirect_uris = ["https://files.unruhig.eu/oauth/callback/"]
|
||
|
|
web_origins = ["https://files.unruhig.eu"]
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_property_protocol_mapper" "seafile-username-mapper" {
|
||
|
|
realm_id = module.seafileclient.realm.id
|
||
|
|
client_id = module.seafileclient.client.id
|
||
|
|
|
||
|
|
name = "username"
|
||
|
|
user_property = "username"
|
||
|
|
claim_name = "preferred_username"
|
||
|
|
add_to_userinfo = true
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = false
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "keycloak_openid_user_client_role_protocol_mapper" "seafile-role-mapper" {
|
||
|
|
realm_id = module.seafileclient.realm.id
|
||
|
|
client_id = module.seafileclient.client.id
|
||
|
|
# client_id_for_role_mappings = module.seafileclient.client.id
|
||
|
|
multivalued = true
|
||
|
|
name = "user-client-role-mapper"
|
||
|
|
claim_name = "roles"
|
||
|
|
client_id_for_role_mappings = module.seafileclient.client.id
|
||
|
|
add_to_userinfo = true
|
||
|
|
add_to_access_token = true
|
||
|
|
add_to_id_token = false
|
||
|
|
}
|