Files
homelab-v/k8s/infra/vpn/netbird/backend/values.yaml
T
Vegard Hagen 69d56e8e71 feat: install Netbird as a VPN solution
Also configure Netbird OIDC client in Keycloak using Crossplane
2024-11-17 17:03:27 +01:00

73 lines
1.9 KiB
YAML

auth:
authority: https://keycloak.stonegarden.dev/realms/homelab
audience: netbird
device:
provider: hosted
audience: netbird
authority: https://keycloak.stonegarden.dev/realms/homelab
clientID: netbird
deviceAuthorizationEndpoint: https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/auth
tokenEndpoint: https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/token
scope: openid
useIDToken: false
idp:
managerType: keycloak
clientID: netbird-backend
secretKeyRef:
name: netbird-backend-oidc-credentials
key: clientSecret
grantType: client_credentials
adminEndpoint: https://keycloak.stonegarden.dev/admin/realms/homelab
tokenEndpoint: https://keycloak.stonegarden.dev/realms/homelab/protocol/openid-connect/token
management:
image:
tag: 0.28.4
nodeSelector:
topology.kubernetes.io/zone: abel
ingress:
enabled: false
# annotations:
# cert-manager.io/cluster-issuer: cloudflare-cluster-issuer
# hosts:
# - host: netbird.stonegarden.dev
# paths:
# - path: /api
# pathType: Prefix
# - path: /management.ManagementService/
# pathType: Prefix
# tls:
# - hosts:
# - netbird.stonegarden.dev
signal:
image:
tag: 0.28.4
nodeSelector:
topology.kubernetes.io/zone: abel
uri: netbird.stonegarden.dev:443
protocol: https
ingress:
enabled: false
# annotations:
# cert-manager.io/cluster-issuer: cloudflare-cluster-issuer
# hosts:
# - host: netbird.stonegarden.dev
# paths:
# - path: /signalexchange.SignalExchange/
# pathType: Prefix
# tls:
# - hosts:
# - netbird.stonegarden.dev
stun:
uri: stun:coturn.stonegarden.dev:3478
turn:
uri: turn:coturn.stonegarden.dev:3478
user: netbird
secretKeyRef:
name: netbird-turn-credentials
key: password