mathieu/system-config
1
0
Fork 0
Code Issues Packages Activity Actions

Move keycloak to infra
All checks were successful
ShellCheck / shellcheck (push) Successful in 22s
Details

Browse source
This commit is contained in:
Mathieu Strypsteen 2024-09-12 21:18:59 +02:00
parent 720beb07c4
commit fa66c1c5cd
Signed by: mathieu
GPG key ID: 782A42E461BC6824
7 changed files with 16 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
container-config/nginx-home/auth
View file

@ -4,8 +4,8 @@ server {
listen [::]:443 ssl; listen [::]:443 ssl;
include snippets/headers.conf; include snippets/headers.conf;
location / { location / {
set $upstream home.server.home.arpa; set $upstream systemd-keycloak.;
proxy_pass http://$upstream:8000; proxy_pass http://$upstream:8080;
include snippets/proxy.conf; include snippets/proxy.conf;
} }
} }

1
home/etc/containers/systemd/postgresql.container
View file

@ -2,6 +2,7 @@
Image=docker.io/postgres:16-alpine Image=docker.io/postgres:16-alpine
Network=postgresql.network Network=postgresql.network
Volume=postgresql.volume:/var/lib/postgresql/data:U,Z Volume=postgresql.volume:/var/lib/postgresql/data:U,Z
Secret=POSTGRES_PASSWORD,type=env
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

3
infra/etc/containers/systemd/borgmatic.container.d/override.conf Normal file
View file

@ -0,0 +1,3 @@
[Container]
Network=postgresql.network
Secret=POSTGRES_PASSWORD,type=env

1
home/etc/containers/systemd/keycloak.container → infra/etc/containers/systemd/keycloak.container
View file

@ -8,7 +8,6 @@ Network=postgresql.network
Exec=start --hostname=auth.strypsteen.com --http-enabled=true --proxy-headers=xforwarded --db=postgres --db-url-host=systemd-postgresql --db-username=keycloak --db-url-database=keycloak Exec=start --hostname=auth.strypsteen.com --http-enabled=true --proxy-headers=xforwarded --db=postgres --db-url-host=systemd-postgresql --db-username=keycloak --db-url-database=keycloak
Tmpfs=/opt/keycloak Tmpfs=/opt/keycloak
Secret=KC_DB_PASSWORD,type=env Secret=KC_DB_PASSWORD,type=env
PublishPort=8000:8080
AutoUpdate=registry AutoUpdate=registry
[Install] [Install]
WantedBy=multi-user.target WantedBy=multi-user.target

8
infra/etc/containers/systemd/postgresql.container Normal file
View file

@ -0,0 +1,8 @@
[Container]
Image=docker.io/postgres:16-alpine
Network=postgresql.network
Volume=postgresql.volume:/var/lib/postgresql/data:U,Z
Secret=POSTGRES_PASSWORD,type=env
AutoUpdate=registry
[Install]
WantedBy=multi-user.target

2
infra/etc/containers/systemd/postgresql.network Normal file
View file

@ -0,0 +1,2 @@
[Network]
IPv6=true

0
infra/etc/containers/systemd/postgresql.volume Normal file
View file