feat: add audiobookshelf argo app
This commit is contained in:
parent
c9fcd56bda
commit
eb0a8d135e
5 changed files with 158 additions and 18 deletions
|
|
@ -53,6 +53,10 @@ spec:
|
|||
path: smtp_password.txt
|
||||
- key: storage.encryption.key
|
||||
path: storage.encryption.key
|
||||
- key: oidc.audiobookshelf.client_secret
|
||||
path: oidc.audiobookshelf.client_secret
|
||||
- key: identity_providers.oidc.jwks.key.pem
|
||||
path: identity_providers.oidc.jwks.key.pem
|
||||
persistence:
|
||||
enabled: true
|
||||
existingClaim: authelia-data
|
||||
|
|
@ -118,9 +122,51 @@ spec:
|
|||
minimum_version: TLS1.2
|
||||
access_control:
|
||||
default_policy: two_factor
|
||||
identity_providers:
|
||||
oidc:
|
||||
enabled: true
|
||||
hmac_secret:
|
||||
path: identity_providers.oidc.hmac.key
|
||||
jwks:
|
||||
- key_id: authelia
|
||||
algorithm: RS256
|
||||
use: sig
|
||||
key:
|
||||
path: /secrets/secrets-authelia/identity_providers.oidc.jwks.key.pem
|
||||
clients:
|
||||
- client_id: audiobookshelf
|
||||
client_name: Audiobookshelf
|
||||
client_secret:
|
||||
path: /secrets/secrets-authelia/oidc.audiobookshelf.client_secret
|
||||
public: false
|
||||
authorization_policy: two_factor
|
||||
require_pkce: true
|
||||
pkce_challenge_method: S256
|
||||
redirect_uris:
|
||||
- https://audiobooks.roboces.dev/auth/openid/callback
|
||||
- https://audiobooks.roboces.dev/auth/openid/mobile-redirect
|
||||
- https://audiobooks.roboces.dev/audiobookshelf/auth/openid/callback
|
||||
- https://audiobooks.roboces.dev/audiobookshelf/auth/openid/mobile-redirect
|
||||
- https://audiobooks.fuku/auth/openid/callback
|
||||
- https://audiobooks.fuku/auth/openid/mobile-redirect
|
||||
- https://audiobooks.fuku/audiobookshelf/auth/openid/callback
|
||||
- https://audiobooks.fuku/audiobookshelf/auth/openid/mobile-redirect
|
||||
- audiobookshelf://oauth
|
||||
scopes:
|
||||
- openid
|
||||
- profile
|
||||
- groups
|
||||
- email
|
||||
response_types:
|
||||
- code
|
||||
grant_types:
|
||||
- authorization_code
|
||||
access_token_signed_response_alg: none
|
||||
userinfo_signed_response_alg: none
|
||||
token_endpoint_auth_method: client_secret_basic
|
||||
- repoURL: https://git.roboces.dev/catalin/fukuops.git
|
||||
path: k8s/services/authelia
|
||||
targetRevision: feat/authelia
|
||||
targetRevision: main
|
||||
project: roboces
|
||||
syncPolicy:
|
||||
automated:
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue