WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-26 11:36:10 +08:00
Code Issues Packages Projects Releases Wiki Activity

Ipsilon: prepare config changes for staging

Browse Source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard
2020-09-11 15:22:15 +02:00
parent f02d19dcb9
commit 70f71744fb
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
roles/ipsilon/templates/configuration.conf
View File

@@ -5,15 +5,16 @@ fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False
[info_config]
{% if env == "production" %}
global enabled=fas
fas FAS url=https://admin{{env_suffix}}.fedoraproject.org/accounts/
fas FAS Proxy client user Agent=Fedora Ipsilon
fas FAS Insecure Auth=False
fas Bind Username={{ ipsilon_fasinfo_username }}
{% if env == "production" %}
fas Bind Password={{ ipsilon_fasinfo_prod_password }}
{% else %}
fas Bind Password={{ ipsilon_fasinfo_stg_password }}
global enabled=fasjson
fasjson fasjson url=https://fasjson{{env_suffix}}.fedoraproject.org/
{% endif %}
[authz_config]
@@ -42,7 +43,11 @@ openidc policy url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc tos url=https://fedoraproject.org/wiki/Legal:PrivacyPolicy
openidc idp sig key id=20161031-sig
openidc allow dynamic client registration=False
{% if env == 'staging' %}
openidc default attribute mapping=[["email", "email"], ["username", "preferred_username"], ["timezone", "zoneinfo"], ["locale", "locale"], ["human_name","name"], ["agreements","agreements"], ["groups","groups"]]
{% else %}
openidc default attribute mapping=[["*", "*"], ["timezone", "zoneinfo"], ["_groups", "groups"], [["_extras", "cla"], "cla"], ["fullname", "name"], ["_username", "preferred_username"]]
{% endif %}
openid endpoint url=https://id{{env_suffix}}.fedoraproject.org/openid/
openid identity url template=http://%(username)s.id{{env_suffix}}.fedoraproject.org/