mirror of
https://github.com/samply/bridgehead.git
synced 2025-06-16 21:50:14 +02:00
Compare commits
2 Commits
feature/au
...
cbb73ab9b5
Author | SHA1 | Date | |
---|---|---|---|
cbb73ab9b5 | |||
dd37863b8b |
@ -23,18 +23,6 @@ services:
|
|||||||
- "traefik.http.routers.exporter_bbmri.tls=true"
|
- "traefik.http.routers.exporter_bbmri.tls=true"
|
||||||
- "traefik.http.middlewares.exporter_bbmri_strip.stripprefix.prefixes=/bbmri-exporter"
|
- "traefik.http.middlewares.exporter_bbmri_strip.stripprefix.prefixes=/bbmri-exporter"
|
||||||
- "traefik.http.routers.exporter_bbmri.middlewares=exporter_bbmri_strip"
|
- "traefik.http.routers.exporter_bbmri.middlewares=exporter_bbmri_strip"
|
||||||
# Main router
|
|
||||||
- "traefik.http.routers.exporter_bbmri.priority=20"
|
|
||||||
|
|
||||||
# API router
|
|
||||||
- "traefik.http.routers.exporter_bbmri_api.middlewares=exporter_bbmri_strip,exporter_auth"
|
|
||||||
- "traefik.http.routers.exporter_bbmri_api.rule=PathRegexp(`/bbmri-exporter/.+`)"
|
|
||||||
- "traefik.http.routers.exporter_bbmri_api.tls=true"
|
|
||||||
- "traefik.http.routers.exporter_bbmri_api.priority=25"
|
|
||||||
|
|
||||||
# Shared middlewares
|
|
||||||
- "traefik.http.middlewares.exporter_auth.basicauth.users=${EXPORTER_USER}"
|
|
||||||
|
|
||||||
volumes:
|
volumes:
|
||||||
- "/var/cache/bridgehead/bbmri/exporter-files:/app/exporter-files/output"
|
- "/var/cache/bridgehead/bbmri/exporter-files:/app/exporter-files/output"
|
||||||
|
|
||||||
@ -77,12 +65,3 @@ services:
|
|||||||
- "traefik.http.routers.reporter_bbmri.tls=true"
|
- "traefik.http.routers.reporter_bbmri.tls=true"
|
||||||
- "traefik.http.middlewares.reporter_bbmri_strip.stripprefix.prefixes=/bbmri-reporter"
|
- "traefik.http.middlewares.reporter_bbmri_strip.stripprefix.prefixes=/bbmri-reporter"
|
||||||
- "traefik.http.routers.reporter_bbmri.middlewares=reporter_bbmri_strip"
|
- "traefik.http.routers.reporter_bbmri.middlewares=reporter_bbmri_strip"
|
||||||
- "traefik.http.routers.reporter_bbmri.priority=20"
|
|
||||||
|
|
||||||
#- "traefik.http.routers.reporter_bbmri.middlewares=reporter_bbmri_strip,exporter_auth"
|
|
||||||
- "traefik.http.routers.reporter_bbmri_api.middlewares=reporter_bbmri_strip,exporter_auth"
|
|
||||||
- "traefik.http.routers.reporter_bbmri_api.rule=PathRegexp(`/bbmri-reporter/.+`)"
|
|
||||||
- "traefik.http.routers.reporter_bbmri_api.tls=true"
|
|
||||||
- "traefik.http.routers.reporter_bbmri_api.priority=25"
|
|
||||||
#- "traefik.http.middlewares.reporter_auth.basicauth.users=${EXPORTER_USER}"
|
|
||||||
|
|
||||||
|
@ -5,11 +5,4 @@ if [ "$ENABLE_EXPORTER" == true ]; then
|
|||||||
OVERRIDE+=" -f ./$PROJECT/modules/exporter-compose.yml"
|
OVERRIDE+=" -f ./$PROJECT/modules/exporter-compose.yml"
|
||||||
EXPORTER_DB_PASSWORD="$(echo \"This is a salt string to generate one consistent password for the exporter. It is not required to be secret.\" | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 30)"
|
EXPORTER_DB_PASSWORD="$(echo \"This is a salt string to generate one consistent password for the exporter. It is not required to be secret.\" | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 30)"
|
||||||
EXPORTER_API_KEY="$(echo \"This is a salt string to generate one consistent API KEY for the exporter. It is not required to be secret.\" | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 64)"
|
EXPORTER_API_KEY="$(echo \"This is a salt string to generate one consistent API KEY for the exporter. It is not required to be secret.\" | sha1sum | openssl pkeyutl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 64)"
|
||||||
|
|
||||||
if [ -z "$EXPORTER_USER" ]; then
|
|
||||||
log "INFO" "Now generating basic auth for the exporter and reporter (see adduser in bridgehead for more information). "
|
|
||||||
generated_passwd="$(cat /proc/sys/kernel/random/uuid | sed 's/[-]//g' | head -c 32)"
|
|
||||||
add_basic_auth_user $PROJECT $generated_passwd "EXPORTER_USER" $PROJECT
|
|
||||||
fi
|
|
||||||
|
|
||||||
fi
|
fi
|
||||||
|
@ -68,3 +68,6 @@ services:
|
|||||||
TEILER_DASHBOARD_DE_URL: "https://${HOST}/bbmri-teiler-dashboard/de"
|
TEILER_DASHBOARD_DE_URL: "https://${HOST}/bbmri-teiler-dashboard/de"
|
||||||
TEILER_DASHBOARD_EN_URL: "https://${HOST}/bbmri-teiler-dashboard/en"
|
TEILER_DASHBOARD_EN_URL: "https://${HOST}/bbmri-teiler-dashboard/en"
|
||||||
HTTP_PROXY: "http://forward_proxy:3128"
|
HTTP_PROXY: "http://forward_proxy:3128"
|
||||||
|
ENABLE_MTBA: "${ENABLE_MTBA}"
|
||||||
|
ENABLE_DATASHIELD: "${ENABLE_DATASHIELD}"
|
||||||
|
IDMANAGER_UPLOAD_APIKEY: "${IDMANAGER_UPLOAD_APIKEY}" # Only used to check if the ID Manager is active
|
||||||
|
@ -22,7 +22,7 @@ services:
|
|||||||
|
|
||||||
opal:
|
opal:
|
||||||
container_name: bridgehead-opal
|
container_name: bridgehead-opal
|
||||||
image: docker.verbis.dkfz.de/ccp/dktk-opal:latest
|
image: docker.verbis.dkfz.de/ccp/dktk-opal:test
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
- "traefik.http.routers.opal_ccp.rule=PathPrefix(`/opal`)"
|
- "traefik.http.routers.opal_ccp.rule=PathPrefix(`/opal`)"
|
||||||
|
@ -19,7 +19,8 @@ services:
|
|||||||
HTTP_RELATIVE_PATH: "/ccp-teiler"
|
HTTP_RELATIVE_PATH: "/ccp-teiler"
|
||||||
|
|
||||||
teiler-dashboard:
|
teiler-dashboard:
|
||||||
image: docker.verbis.dkfz.de/cache/samply/teiler-dashboard:develop
|
#image: docker.verbis.dkfz.de/cache/samply/teiler-dashboard:develop
|
||||||
|
image: samply/teiler-dashboard:develop
|
||||||
container_name: bridgehead-teiler-dashboard
|
container_name: bridgehead-teiler-dashboard
|
||||||
labels:
|
labels:
|
||||||
- "traefik.enable=true"
|
- "traefik.enable=true"
|
||||||
|
6
ccp/vars
6
ccp/vars
@ -11,10 +11,8 @@ BROKER_URL_FOR_PREREQ=$BROKER_URL
|
|||||||
OIDC_USER_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})"
|
OIDC_USER_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})"
|
||||||
OIDC_ADMIN_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})_Verwalter"
|
OIDC_ADMIN_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})_Verwalter"
|
||||||
OIDC_PRIVATE_CLIENT_ID=${SITE_ID}-private
|
OIDC_PRIVATE_CLIENT_ID=${SITE_ID}-private
|
||||||
# OIDC_PUBLIC_CLIENT_ID=${SITE_ID}-public
|
OIDC_PUBLIC_CLIENT_ID=${SITE_ID}-public
|
||||||
# OIDC_URL="https://sso.verbis.dkfz.de/application/o/${SITE_ID}/"
|
OIDC_URL="https://login.verbis.dkfz.de/realms/test-realm-01"
|
||||||
OIDC_PUBLIC_CLIENT_ID=bridgehead-test-public
|
|
||||||
OIDC_URL="https://sso.verbis.dkfz.de/application/o/bridgehead-test-public/"
|
|
||||||
OIDC_GROUP_CLAIM="groups"
|
OIDC_GROUP_CLAIM="groups"
|
||||||
|
|
||||||
POSTGRES_TAG=15.6-alpine
|
POSTGRES_TAG=15.6-alpine
|
||||||
|
Reference in New Issue
Block a user