Update Hydra setup

This commit is contained in:
Jan Dittberner 2023-08-07 18:41:29 +02:00
parent c737754d0e
commit 82954212c4
5 changed files with 27 additions and 20 deletions

View file

@ -22,8 +22,16 @@
- name: Grant permissions on Hydra database to Hydra database user
community.postgresql.postgresql_privs:
database: "{{ hydra_db_name }}"
state: present
privs: CREATE,CONNECT
privs: CONNECT
type: database
role: "{{ hydra_db_user }}"
become_user: postgres
- name: Grant permissions on public schema of Hydra database to Hydra database user
community.postgresql.postgresql_privs:
database: "{{ hydra_db_name }}"
objs: public
privs: CREATE,USAGE
type: schema
role: "{{ hydra_db_user }}"
become_user: postgres

View file

@ -5,7 +5,7 @@ hydra_os_group: hydra
hydra_os_user: hydra
hydra_home: /srv/hydra
hydra_version: "1.11.9"
hydra_checksum: "0e38096a45ae411f70b95beaad69a5335a16cf34c4963724beef3ebce37c283c"
hydra_version: "2.1.2"
hydra_checksum: "acab44b1f5324e001fcfecaa7115a5c3a07156e3e0d3840d8ed12deca4db6490"
use_mkcert: false
use_mkcert: true

View file

@ -13,7 +13,6 @@
state: present
system: true
- name: Create Hydra directories
ansible.builtin.file:
path: "{{hydra_home }}/{{ item.path }}"
@ -26,7 +25,6 @@
- { path: bin, mode: '0750' }
- { path: download, mode: '0750' }
- name: Download Hydra binary
ansible.builtin.get_url:
url: "https://github.com/ory/hydra/releases/download/v{{ hydra_version }}/hydra_{{ hydra_version }}-linux_64bit.tar.gz"

View file

@ -3,14 +3,22 @@ serve:
admin:
host: {{ oidc_urls.hydra_admin.address | default("localhost") }}
port: {{ oidc_urls.hydra_admin.port | default("4445") }}
tls:
enabled: true
cert:
path: {{ hydra_tls.cert }}
key:
path: {{ hydra_tls.key }}
public:
host: {{ oidc_urls.hydra_public.address | default(ansible_default_ipv4.address) }}
port: {{ oidc_urls.hydra_public.port | default("4444") }}
tls:
cert:
path: {{ hydra_tls.cert }}
key:
path: {{ hydra_tls.key }}
tls:
enabled: true
cert:
path: {{ hydra_tls.cert }}
key:
path: {{ hydra_tls.key }}
dsn: 'postgres://{{ hydra_db_user }}:{{ hydra_db_password }}@{{ hydra_db_host }}:{{ hydra_db_port }}/{{ hydra_db_name }}'
webfinger:
@ -18,14 +26,7 @@ webfinger:
supported_claims:
- email
- email_verified
- given_name
- family_name
- middle_name
- name
- birthdate
- zoneinfo
- locale
- https://auth.cacert.org/groups
supported_scope:
- profile
- email

@ -1 +1 @@
Subproject commit 4d3f908958b100eb901ce9f849a6fdd613aece06
Subproject commit 6aa5d1de0411ce93deb67d91ed841ec1ef658bc3