forked from ungleich-public/ungleich-user
It opens with the five required variables, then what production usually sets (proxy header, PostgreSQL, mail relay, OTP), then every optional setting commented out at its default. It lists exactly the 51 variables the code reads.
35 lines
1.1 KiB
YAML
35 lines
1.1 KiB
YAML
# Non-secret settings. See .env.example and docker.md for every variable.
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ungleich-user
|
|
data:
|
|
ALLOWED_HOSTS: "account.ungleich.ch"
|
|
CSRF_TRUSTED_ORIGINS: "https://account.ungleich.ch"
|
|
TRUST_X_FORWARDED_PROTO: "True"
|
|
DEBUG: "False"
|
|
LOG_LEVEL: "INFO"
|
|
|
|
LDAPSERVER: "ldaps://ldap1.ungleich.ch ldaps://ldap2.ungleich.ch"
|
|
LDAP_USE_TLS: "False" # StartTLS; not used with ldaps://
|
|
LDAPSEARCH: "ou=customer,dc=ungleich,dc=ch ou=users,dc=ungleich,dc=ch"
|
|
ENTIRE_SEARCH_BASE: "dc=ungleich,dc=ch"
|
|
LDAP_CUSTOMER_DN: "ou=customer,dc=ungleich,dc=ch"
|
|
LDAP_CUSTOMER_GROUP_ID: "10004" # gidNumber for new customers
|
|
LDAP_DEFAULT_START_UID: "10000" # uidNumbers start above this
|
|
|
|
DATABASE_HOST: "" # REQUIRED for >1 replica: PostgreSQL host
|
|
DATABASE_NAME: "ungleich_user"
|
|
DATABASE_USER: "ungleich_user"
|
|
DATABASE_SSLMODE: "prefer"
|
|
|
|
EMAIL_FROM_ADDRESS: "" # REQUIRED
|
|
EMAIL_HOST: "localhost"
|
|
EMAIL_PORT: "25"
|
|
EMAIL_USE_TLS: "True"
|
|
|
|
OTPSERVER: "" # REQUIRED
|
|
ADMIN_NAME: ""
|
|
ADMIN_REALM: ""
|
|
USER_REALM: ""
|
|
ALLOWED_REALMS: ""
|