gitops/homelab-v
1
0
Fork 0
mirror of https://github.com/outbackdingo/homelab-v.git synced 2026-08-25 14:53:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(authelia): harden oidc clients

Browse Source
This commit is contained in:
Vegard Hagen
2025-01-11 10:43:34 +01:00
parent ae355bb427
commit d816953b98
4 changed files with 24 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/infra/auth/authelia/values.yaml
+15 -3
View File
@@ -75,42 +75,54 @@ configMap:
allowed_origins_from_client_redirect_uris: true
endpoints: [ userinfo, authorization, token, revocation, introspection ]
clients:
- client_id: argocd
client_secret: { path: /secrets/client-argocd/client_secret.txt }
client_name: Argo CD
public: false
authorization_policy: two_factor
pre_configured_consent_duration: 1 month
redirect_uris:
- https://argocd.stonegarden.dev/auth/callback
- https://argocd.stonegarden.dev/applications
scopes: [ openid, groups, email, profile, offline_access ]
userinfo_signed_response_alg: none
id_token_signed_response_alg: ES256
access_token_signed_response_alg: ES256
- client_id: argocd-cli
client_name: Argo CD (CLI)
public: true
authorization_policy: two_factor
pre_configured_consent_duration: 1 month
redirect_uris: [ http://localhost:8085/auth/callback ]
scopes: [ openid, groups, email, profile, offline_access ]
userinfo_signed_response_alg: none
id_token_signed_response_alg: ES256
access_token_signed_response_alg: ES256
- client_id: kubectl
client_name: kubectl
public: true
authorization_policy: two_factor
pre_configured_consent_duration: 1 month
require_pkce: true
redirect_uris: [ http://localhost:8000, http://localhost:18000 ]
scopes: [ openid, groups, email, profile, offline_access ]
userinfo_signed_response_alg: none
- client_id: netbird
client_secret: { path: /secrets/client-netbird/client_secret.txt }
client_name: NetBird
public: false
authorization_policy: two_factor
pre_configured_consent_duration: 1 month
require_pkce: true
pkce_challenge_method: S256
audience: [ netbird ]
redirect_uris:
- http://localhost:53000
- https://netbird.stonegarden.dev/callback
- https://netbird.stonegarden.dev/silent-callback
scopes: [ openid, profile, email ]
scopes: [ openid, profile, email, offline_access ]
token_endpoint_auth_method: client_secret_post
secret: