Integrate central Keycloak in Teiler

ccp/modules/datashield-compose.yml

@@ -96,7 +96,7 @@ services:
     networks:
       - default
       - rstudio
-  
+
   traefik:
     networks:
       - default

ccp/vars

@@ -10,6 +10,7 @@ BROKER_URL_FOR_PREREQ=$BROKER_URL
 DEFAULT_LANGUAGE=DE
 DEFAULT_LANGUAGE_LOWER_CASE=${DEFAULT_LANGUAGE,,}
 ENABLE_EXPORTER=true
+ENABLE_LOGIN=true
 ENABLE_TEILER=true
 #ENABLE_DATASHIELD=true
 

lib/functions.sh

@@ -270,7 +270,7 @@ function sync_secrets() {
     if [[ $OIDC_PRIVATE_REDIRECT_URLS != "" ]]; then
         if [[ $secret_sync_args == "" ]]; then
             secret_sync_args="OIDC:OIDC_PUBLIC:public;$OIDC_PUBLIC_REDIRECT_URLS"
-        else 
+        else
             secret_sync_args+="${delimiter}OIDC:OIDC_PUBLIC:public;$OIDC_PUBLIC_REDIRECT_URLS"
         fi
     fi
@@ -282,7 +282,7 @@ function sync_secrets() {
     docker run --rm \
         -v /var/cache/bridgehead/secrets/oidc:/usr/local/cache \
         -v $PRIVATEKEYFILENAME:/run/secrets/privkey.pem:ro \
-        -v /srv/docker/bridgehead/$PROJECT/root.crt.pem:/run/secrets/root.crt.pem:ro \
+        -v ./$PROJECT/root.crt.pem:/run/secrets/root.crt.pem:ro \
         -v /etc/bridgehead/trusted-ca-certs:/conf/trusted-ca-certs:ro \
         -e TLS_CA_CERTIFICATES_DIR=/conf/trusted-ca-certs \
         -e NO_PROXY=localhost,127.0.0.1 \