futile/thingy
1
0
Fork 0
mirror of https://gitlab.com/futile/thingy.git synced 2026-07-21 08:10:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

set up stalwart as oidc provider

Browse Source
This commit is contained in:
futile
2026-07-19 03:52:57 +01:00
parent 4abf2a060c
commit 4443926ca4
3 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.example
+6 -4
View File
@@ -1,14 +1,16 @@
# stalwart # stalwart
STALWART_PUBLIC_URL=https://m.example.org STALWART_PUBLIC_URL=https://m.example.org
OIDC_KEY=GENERATE_STRING # openssl rand -hex 32
OIDC_SIGNATURE_KEY=GENERATE_PEM # openssl genpkey -algorithm EC -pkeyopt ec_paramgen_curve:secp384r1 -pkeyopt ec_param_enc:named_curve
# bulwark # bulwark
JMAP_SERVER_URL=https://m.example.org JMAP_SERVER_URL=https://m.example.org
SESSION_SECRET=very_long_string SESSION_SECRET=GENERATE_STRING # openssl rand -hex 32
SETTINGS_SYNC_ENABLED=true SETTINGS_SYNC_ENABLED=true
ADMIN_PASSWORD=password ADMIN_PASSWORD=GENERATE_PASSWORD # tr -dc 'A-Za-z0-9' < /dev/urandom | head -c 20; echo
# vykar # vykar
VYKAR_LABEL=borgbase VYKAR_LABEL=borgbase
VYKAR_URL=https://myrepo.repo.borgbase.com VYKAR_URL=https://myrepo.repo.borgbase.com
VYKAR_ACCESS_TOKEN=access_token VYKAR_ACCESS_TOKEN=ACCESS_TOKEN
VYKAR_ENCRYPTION_SECRET=very_long_string VYKAR_ENCRYPTION_SECRET=GENERATE_STRING # openssl rand -hex 32
README.md
+8
View File
@@ -69,6 +69,14 @@ specifics for everything
- added `172.18.0.0/24`; reason: `internal` - added `172.18.0.0/24`; reason: `internal`
- settings -> network -> http -> security - settings -> network -> http -> security
- permissive cors policy: `true` **[restart needed]** - permissive cors policy: `true` **[restart needed]**
- settings -> authentication -> oidc provider
- oauth settings
- key: `secret read from environment variable`
- variable name: `OIDC_KEY`
- openid connect
- signature algorithm: `ECDSA using P-384 and SHA-384`
- signature key: `secret read from environment variable`
- variable name: `OIDC_SIGNATURE_KEY`
**useful links** **useful links**
docker-compose.yml
+2
View File
@@ -26,6 +26,8 @@ services:
- "127.0.0.1:8080:8080" - "127.0.0.1:8080:8080"
environment: environment:
- STALWART_PUBLIC_URL - STALWART_PUBLIC_URL
- OIDC_KEY
- OIDC_SIGNATURE_KEY
volumes: volumes:
- stalwart-etc:/etc/stalwart - stalwart-etc:/etc/stalwart
- stalwart-data:/var/lib/stalwart - stalwart-data:/var/lib/stalwart