Compare commits

...

3 Commits

Author SHA1 Message Date
Elizabeth Hunt 50f053e7db hcaptcha 2024-03-29 18:36:00 -04:00
Elizabeth Hunt 5e87f20ab8 dns setup 2024-03-29 17:05:03 -04:00
Elizabeth Hunt 566db7ed84 fix yammllint warning and random space from weird line wrapping 2024-03-27 18:08:02 -04:00
5 changed files with 35 additions and 2 deletions

View File

@ -24,7 +24,7 @@ rules:
indentation: enable indentation: enable
key-duplicates: enable key-duplicates: enable
key-ordering: disable key-ordering: disable
line-length: enable line-length: disable
new-line-at-end-of-file: enable new-line-at-end-of-file: enable
new-lines: enable new-lines: enable
octal-values: disable octal-values: disable

View File

@ -0,0 +1,10 @@
---
hatecomputers_club_oauth2_scope: "openid,email,profile"
hatecomputers_club_oauth2_auth_url: "https://auth.hatecomputers.club/ui/oauth2"
hatecomputers_club_oauth2_token_url: >
https://auth.hatecomputers.club/oauth2/token
hatecomputers_club_oauth2_user_info_uri: >
https://auth.hatecomputers.club/oauth2/openid/{{ hatecomputers_club_oauth2_client_id }}/userinfo
hatecomputers_club_oauth2_redirect_uri: "https://hatecomputers.club/auth"
hatecomputers_intra_bind_address: "{{ lookup('community.general.dig', inventory_hostname) }}"

View File

@ -16,6 +16,15 @@
group: root group: root
mode: 0700 mode: 0700
- name: Allow dns from rfc1918 networks
loop: "{{ rfc1918_networks }}"
community.general.ufw:
port: 53
rule: allow
from: "{{ item }}"
state: "enabled"
proto: "udp"
- name: Enable hatecomputers-club - name: Enable hatecomputers-club
ansible.builtin.systemd_service: ansible.builtin.systemd_service:
state: restarted state: restarted

View File

@ -2,13 +2,23 @@
version: '3' version: '3'
services: services:
kanidm: server:
image: git.hatecomputers.club/hatecomputers/hatecomputers.club:latest image: git.hatecomputers.club/hatecomputers/hatecomputers.club:latest
restart: always restart: always
ports: ports:
- 127.0.0.1:9696:8080 - 127.0.0.1:9696:8080
- {{ hatecomputers_intra_bind_address }}:53:8053/udp
environment: environment:
- CLOUDFLARE_TOKEN={{ cloudflare_api_token }} - CLOUDFLARE_TOKEN={{ cloudflare_api_token }}
- CLOUDFLARE_ZONE={{ cloudflare_zone_id }} - CLOUDFLARE_ZONE={{ cloudflare_zone_id }}
- OAUTH_SCOPES={{ hatecomputers_club_oauth2_scope }}
- OAUTH_AUTH_URL={{ hatecomputers_club_oauth2_auth_url }}
- OAUTH_TOKEN_URL={{ hatecomputers_club_oauth2_token_url }}
- OAUTH_CLIENT_ID={{ hatecomputers_club_oauth2_client_id }}
- OAUTH_CLIENT_SECRET={{ hatecomputers_club_oauth2_client_secret }}
- OAUTH_REDIRECT_URI={{ hatecomputers_club_oauth2_redirect_uri }}
- OAUTH_USER_INFO_URI={{ hatecomputers_club_oauth2_user_info_uri }}
- HCAPTCHA_SITE_KEY={{ hcaptcha_site_key }}
- HCAPTCHA_SECRET={{ hcaptcha_secret }}
volumes: volumes:
- ./db:/app/db - ./db:/app/db

View File

@ -10,3 +10,7 @@ gitea_internal_token
drone_gitea_client_id drone_gitea_client_id
drone_gitea_client_secret drone_gitea_client_secret
drone_rpc_secret drone_rpc_secret
hatecomputers_club_oauth2_client_id
hatecomputers_club_oauth2_client_secret
hcaptcha_site_key
hcaptcha_secret