diff --git a/examples/authentik_ldap/.env b/examples/authentik_ldap/.env deleted file mode 100644 index 9467b618..00000000 --- a/examples/authentik_ldap/.env +++ /dev/null @@ -1,2 +0,0 @@ -PG_PASS=mgXHPydZHMpir8h3bUWxxkV1LyBQfizpP1zW3CXN8iewkgNC -AUTHENTIK_SECRET_KEY=dNHpMtjAgw2D1NXiyeKgJ/olDuUQ5ieWZVBDr/6CVK0wDyK/8r9vj8Lv9DfworfJlA8iVk3u/DXQE+1Z diff --git a/examples/authentik_ldap/.gitignore b/examples/authentik_ldap/.gitignore new file mode 100644 index 00000000..4cb512ec --- /dev/null +++ b/examples/authentik_ldap/.gitignore @@ -0,0 +1 @@ +/.env \ No newline at end of file diff --git a/examples/authentik_ldap/README.md b/examples/authentik_ldap/README.md index f82eb131..5be2ae14 100644 --- a/examples/authentik_ldap/README.md +++ b/examples/authentik_ldap/README.md @@ -5,6 +5,8 @@ ``` echo "PG_PASS=$(openssl rand 36 | base64)" >> .env echo "AUTHENTIK_SECRET_KEY=$(openssl rand 60 | base64)" >> .env + echo AUTHENTIK_TOKEN= >> .env + echo SEMAPHORE_LDAP_BIND_PASSWORD= >> .env docker-compose up -d ``` 2. To start the initial setup, navigate to http://localhsot:9000/if/flow/initial-setup/. @@ -14,16 +16,17 @@ 1. Copy `AUTHENTIK_TOKEN` to clipboard. - - 2. Update `AUTHENTIK_TOKEN` for LDAP service. - 3. Reload the stack: + 2. Open `.env` file and: + 1. Paste copied value after `AUTHENTIK_TOKEN=` + 2. Enter your `ldapservice` user password after `SEMAPHORE_LDAP_BIND_PASSWORD=` + 3. Down and up the stack to apply changes: ``` docker-compose down docker-compose up -d ``` 5. Create new Semaphore project: 1. Open http://localhost:3000 - 2. Login as `john` + 2. Login as `ldapservice` 3. Create demo project diff --git a/examples/authentik_ldap/docker-compose.yml b/examples/authentik_ldap/docker-compose.yml index e41f5b2f..eea9a15e 100644 --- a/examples/authentik_ldap/docker-compose.yml +++ b/examples/authentik_ldap/docker-compose.yml @@ -68,8 +68,8 @@ services: environment: AUTHENTIK_HOST: http://server:9000 AUTHENTIK_INSECURE: "false" - AUTHENTIK_TOKEN: DdmZvpMV9Jb7XAw0nts08jQ43hMOsx4ANkkABLz4s9HpxV8mWzxdYjF5WIpg - + env_file: + - .env semaphore: image: semaphoreui/semaphore:latest environment: @@ -81,9 +81,10 @@ services: SEMAPHORE_LDAP_SERVER: "ldap:3389" SEMAPHORE_LDAP_SEARCH_DN: "ou=users,dc=ldap,dc=goauthentik,dc=io" SEMAPHORE_LDAP_BIND_DN: "cn=ldapservice,ou=users,DC=ldap,DC=goauthentik,DC=io" - SEMAPHORE_LDAP_BIND_PASSWORD: "changeme" SEMAPHORE_LDAP_USERFILTER: "(&(objectClass=inetOrgPerson)(cn=%s))" SEMAPHORE_NON_ADMIN_CAN_CREATE_PROJECT: "yes" + env_file: + - .env ports: - "3000:3000" volumes: