Commit b85e1aa0 authored by ale's avatar ale

Allow setting a URL path prefix for the SSO server

Use the global variable 'sso_server_url_path_prefix' to deploy the SSO
server on a subpath of a public endpoint.
parent 5944c58f
Pipeline #1507 passed with stage
in 6 minutes and 50 seconds
......@@ -4,3 +4,6 @@ sso_session_enc_secret: ""
sso_csrf_secret: ""
sso_device_manager_auth_secret: ""
enable_keystore: false
# Allows deploying the SSO service on a subpath.
sso_server_url_path_prefix: "/"
......@@ -58,14 +58,15 @@ keystore:
key: "/etc/credentials/x509/sso-server/client/private_key.pem"
ca: "/etc/credentials/x509/sso-server/ca.pem"
{% endif %}
url_path_prefix: "{{ sso_server_url_path_prefix }}"
device_manager:
auth_key: "{{ sso_device_manager_auth_secret }}"
trusted_forwarders:
- 127.0.0.1
- ::1
{%- for h in groups['frontend'] %}
{% for h in groups['frontend'] %}
- {{ hostvars[h]['ip'] }}
{%- for n in net_overlays %}{% if 'ip_' + n.name in hostvars %}
{% for n in net_overlays %}{% if hostvars[h].get('ip_' + n.name) %}
- {{ hostvars[h]['ip_' + n.name] }}
{% endif %}{% endfor %}
{% endfor %}
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment