Jan Dittberner
5daa87ca90
This commit adds a role to ensure local preconditions (i.e. mkcert) and a Vagrantfile to test the ansible playbook in a local virtual machine.
31 lines
872 B
YAML
31 lines
872 B
YAML
---
|
|
# this is for a localhost deployment, database passwords for public servers
|
|
# must be different random values encrypted via ansible-vault
|
|
hydra_db_password: hydra
|
|
hydra_db_host: localhost
|
|
hydra_db_port: 5432
|
|
hydra_tls:
|
|
cert: "{{ hydra_home }}/etc/hydra.cacert.localhost+1.pem"
|
|
key: "{{ hydra_home }}/etc/hydra.cacert.localhost+1-key.pem"
|
|
# this is for a localhost deployment, secrets for public servers must be
|
|
# different random values encrypted via ansible-vault
|
|
hydra_system_secret: "AczA+NZ25Ye9eAreglv5bo9XcND6uwBQHVUYCvPfwXo="
|
|
|
|
oidc_urls:
|
|
hydra_admin:
|
|
host: hydra.cacert.localhost
|
|
port: 4445
|
|
hydra_public:
|
|
host: auth.cacert.localhost
|
|
port: 4444
|
|
idp:
|
|
host: login.cacert.localhost
|
|
port: 3000
|
|
demoapp:
|
|
host: app.cacert.localhost
|
|
port: 4000
|
|
register:
|
|
host: register.cacert.localhost
|
|
port: 5000
|
|
|
|
use_mkcert: true
|