ungleich-user/deploy/k8s/base/configmap.yaml
Sajeyks 5a2e612faa Replace env.sample with a shorter .env.example
It opens with the five required variables, then what production
usually sets (proxy header, PostgreSQL, mail relay, OTP), then every
optional setting commented out at its default. It lists exactly the 51
variables the code reads.
2026-11-11 21:36:51 +03:00

35 lines
1.1 KiB
YAML

# Non-secret settings. See .env.example and docker.md for every variable.
apiVersion: v1
kind: ConfigMap
metadata:
name: ungleich-user
data:
ALLOWED_HOSTS: "account.ungleich.ch"
CSRF_TRUSTED_ORIGINS: "https://account.ungleich.ch"
TRUST_X_FORWARDED_PROTO: "True"
DEBUG: "False"
LOG_LEVEL: "INFO"
LDAPSERVER: "ldaps://ldap1.ungleich.ch ldaps://ldap2.ungleich.ch"
LDAP_USE_TLS: "False" # StartTLS; not used with ldaps://
LDAPSEARCH: "ou=customer,dc=ungleich,dc=ch ou=users,dc=ungleich,dc=ch"
ENTIRE_SEARCH_BASE: "dc=ungleich,dc=ch"
LDAP_CUSTOMER_DN: "ou=customer,dc=ungleich,dc=ch"
LDAP_CUSTOMER_GROUP_ID: "10004" # gidNumber for new customers
LDAP_DEFAULT_START_UID: "10000" # uidNumbers start above this
DATABASE_HOST: "" # REQUIRED for >1 replica: PostgreSQL host
DATABASE_NAME: "ungleich_user"
DATABASE_USER: "ungleich_user"
DATABASE_SSLMODE: "prefer"
EMAIL_FROM_ADDRESS: "" # REQUIRED
EMAIL_HOST: "localhost"
EMAIL_PORT: "25"
EMAIL_USE_TLS: "True"
OTPSERVER: "" # REQUIRED
ADMIN_NAME: ""
ADMIN_REALM: ""
USER_REALM: ""
ALLOWED_REALMS: ""