summaryrefslogtreecommitdiffstats
path: root/pillar/id/themis_lysergic_dev.sls
diff options
context:
space:
mode:
authorPratyush Desai2023-03-11 22:11:32 +0100
committerPratyush Desai2023-03-11 22:11:32 +0100
commit84c1cecf614910ea0da86d9ffde349731bda4b30 (patch)
treee5ed2f92ea06613431b6970434911bb483a9b2e0 /pillar/id/themis_lysergic_dev.sls
parentcc007e6470a54311fac2facd1c6e9b321a3a4f28 (diff)
parentc932881cd70bd64db40245ea1e3df283f3859c78 (diff)
downloadsalt-84c1cecf614910ea0da86d9ffde349731bda4b30.tar.gz
salt-84c1cecf614910ea0da86d9ffde349731bda4b30.tar.bz2
salt-84c1cecf614910ea0da86d9ffde349731bda4b30.zip
Merge pull request 'Import themis / BookStack' (#35) from bookstack into production
Reviewed-on: https://git.com.de/LibertaCasa/salt/pulls/35 Reviewed-by: Pratyush Desai <pratyush.desai@liberta.casa>
Diffstat (limited to 'pillar/id/themis_lysergic_dev.sls')
-rw-r--r--pillar/id/themis_lysergic_dev.sls77
1 files changed, 77 insertions, 0 deletions
diff --git a/pillar/id/themis_lysergic_dev.sls b/pillar/id/themis_lysergic_dev.sls
new file mode 100644
index 0000000..0773f4f
--- /dev/null
+++ b/pillar/id/themis_lysergic_dev.sls
@@ -0,0 +1,77 @@
+apache:
+ sites:
+ BookStack:
+ interface: '[fd29:8e45:f292:ff80::1]'
+ port: 443
+ ServerName: bookstack.themis.backend.syscid.com
+ DocumentRoot: /srv/www/BookStack/
+ DirectoryIndex: index.php
+ Directory:
+ /srv/www/BookStack/:
+ Options: 'Indexes FollowSymLinks -MultiViews'
+ AllowOverride: None
+ Require: all granted
+ Formula_Append: |
+ RewriteEngine On
+ RewriteCond '%{HTTP:Authorization} .'
+ RewriteCond '.* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]'
+ RewriteCond '%{REQUEST_FILENAME} !-d'
+ RewriteCond '%{REQUEST_URI} (.+)/$'
+ RewriteCond '^ %1 [L,R=301]'
+ RewriteCond '%{REQUEST_FILENAME} !-d'
+ RewriteCond '%{REQUEST_FILENAME} !-f'
+ RewriteCond '^ index.php [L]'
+ LogLevel: False
+ ErrorLog: False
+ LogFormat: False
+ CustomLog: False
+ ServerAdmin: False
+ ServerAlias: False
+ Formula_Append: |
+ Include /etc/apache2/snippets.d/ssl_themis.conf
+ AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css text/javascript application/javascript
+ SetOutputFilter DEFLATE
+ <FilesMatch '\.php$'>
+ SetHandler 'proxy:unix:/run/php-fpm/BookStack.sock|fcgi://BookStack'
+ </FilesMatch>
+
+profile:
+ bookstack:
+ app_url: https://libertacasa.info
+ db_host: ${'secret_bookstack:db_host'}
+ db_database: ${'secret_bookstack:db_database'}
+ db_username: ${'secret_bookstack:db_username'}
+ db_password: ${'secret_bookstack:db_password'}
+ mail_driver: smtp
+ mail_from_name: LibertaCasa Documentation
+ mail_from: mail@libertacasa.info
+ mail_host: zz0.email
+ mail_port: 465
+ mail_username: mail@libertacasa.info
+ mail_password: ${'secret_bookstack:mail_password'}
+ mail_encryption: ssl
+ app_theme: lysergic
+ cache_driver: memcached
+ session_driver: memcached
+ memcached_servers: /run/memcached/memcached.sock
+ session_secure_cookie: true
+ session_cookie_name: libertacasa_megayummycookie
+ app_debug: false
+ session_lifetime: 240
+ auth_method: saml2
+ auth_auto_initiate: true
+ saml2_name: LibertaCasa SSO
+ saml2_email_attribute: email
+ saml2_external_id_attribute: uid
+ saml2_display_name_attributes: fullname
+ saml2_idp_entityid: https://libsso.net/realms/libertacasa
+ saml2_idp_sso: https://libsso.net/realms/libertacasa/protocol/saml
+ saml2_idp_slo: https://libsso.net/realms/libertacasa/protocol/saml
+ saml2_idp_x509: ${'secret_bookstack:saml2_idp_x509'}
+ saml2_autoload_metadata: false
+ saml2_sp_x509: ${'secret_bookstack:saml2_sp_x509'}
+ saml2_sp_x509_key: ${'secret_bookstack:saml2_sp_x509_key'}
+ saml2_user_to_groups: true
+ saml2_group_attribute: groups
+ saml2_remove_from_groups: true
+ queue_connection: database