mirror of https://github.com/samply/bridgehead.git
35 lines
1.2 KiB
Plaintext
35 lines
1.2 KiB
Plaintext
BROKER_ID=broker.ccp-it.dktk.dkfz.de
|
|
BROKER_URL=https://${BROKER_ID}
|
|
PROXY_ID=${SITE_ID}.${BROKER_ID}
|
|
FOCUS_BEAM_SECRET_SHORT="$(cat /proc/sys/kernel/random/uuid | sed 's/[-]//g' | head -c 20)"
|
|
FOCUS_RETRY_COUNT=32
|
|
SUPPORT_EMAIL=support-ccp@dkfz-heidelberg.de
|
|
PRIVATEKEYFILENAME=/etc/bridgehead/pki/${SITE_ID}.priv.pem
|
|
|
|
BROKER_URL_FOR_PREREQ=$BROKER_URL
|
|
|
|
OIDC_USER_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})"
|
|
OIDC_ADMIN_GROUP="DKTK_CCP_$(capitalize_first_letter ${SITE_ID})_Verwalter"
|
|
OIDC_PRIVATE_CLIENT_ID=${SITE_ID}-private
|
|
OIDC_PUBLIC_CLIENT_ID=${SITE_ID}-public
|
|
# Use "test-realm-01" for testing
|
|
OIDC_REALM="${OIDC_REALM:-master}"
|
|
OIDC_URL="https://login.verbis.dkfz.de"
|
|
OIDC_ISSUER_URL="${OIDC_URL}/realms/${OIDC_REALM}"
|
|
OIDC_GROUP_CLAIM="groups"
|
|
OAUTH2_CALLBACK=/oauth2/callback
|
|
OAUTH2_PROXY_SECRET="$(echo \"This is a salt string to generate one consistent encryption key for the oauth2_proxy. It is not required to be secret.\" | openssl rsautl -sign -inkey /etc/bridgehead/pki/${SITE_ID}.priv.pem | base64 | head -c 32)"
|
|
|
|
add_private_oidc_redirect_url "${OAUTH2_CALLBACK}"
|
|
POSTGRES_TAG=15.6-alpine
|
|
|
|
for module in $PROJECT/modules/*.sh
|
|
do
|
|
log DEBUG "sourcing $module"
|
|
source $module
|
|
done
|
|
|
|
idManagementSetup
|
|
mtbaSetup
|
|
adt2fhirRestSetup
|