Moritz
339d37937a
- Rename AshAuthentication strategy from :oidc :rauthy to :oidc :oidc; generated actions are now register_with_oidc / sign_in_with_oidc. - Update config keys (:rauthy → :oidc) in dev.exs and runtime.exs. - Update default_redirect_uri to /auth/user/oidc/callback everywhere. - Rename Mv.Accounts helper functions accordingly. - Update Mv.Secrets, AuthController, link_oidc_account_live and all tests. - Update docker-compose.prod.yml, .env.example, README and docs. IMPORTANT: OIDC providers must be updated to use the new redirect URI /auth/user/oidc/callback instead of /auth/user/rauthy/callback.
39 lines
1.7 KiB
Text
39 lines
1.7 KiB
Text
# Production Environment Variables for docker-compose.prod.yml
|
|
# Copy this file to .env and fill in the actual values
|
|
|
|
# Required: Phoenix secrets (generate with: mix phx.gen.secret)
|
|
SECRET_KEY_BASE=changeme-run-mix-phx.gen.secret
|
|
TOKEN_SIGNING_SECRET=changeme-run-mix-phx.gen.secret
|
|
|
|
# Required: Hostname for URL generation
|
|
PHX_HOST=localhost
|
|
|
|
# Recommended: Association settings
|
|
ASSOCIATION_NAME="Sportsclub XYZ"
|
|
|
|
# Optional: Admin user (created/updated on container start via Release.seed_admin)
|
|
# In production, set these so the first admin can log in. Change password without redeploy:
|
|
# bin/mv eval "Mv.Release.seed_admin()" (with new ADMIN_PASSWORD or ADMIN_PASSWORD_FILE)
|
|
# ADMIN_EMAIL=admin@example.com
|
|
# ADMIN_PASSWORD=secure-password
|
|
# ADMIN_PASSWORD_FILE=/run/secrets/admin_password
|
|
|
|
# Optional: OIDC Configuration
|
|
# These have defaults in docker-compose.prod.yml, only override if needed
|
|
# OIDC_CLIENT_ID=mv
|
|
# OIDC_BASE_URL=http://localhost:8080/auth/v1
|
|
# OIDC_REDIRECT_URI=http://localhost:4001/auth/user/oidc/callback
|
|
# OIDC_CLIENT_SECRET=your-oidc-client-secret
|
|
|
|
# Optional: OIDC group → Admin role sync (e.g. Authentik groups from profile scope)
|
|
# If OIDC_ADMIN_GROUP_NAME is set, users in that group get Admin role on registration/sign-in.
|
|
# OIDC_GROUPS_CLAIM defaults to "groups" (JWT claim name for group list).
|
|
# OIDC_ADMIN_GROUP_NAME=admin
|
|
# OIDC_GROUPS_CLAIM=groups
|
|
|
|
# Optional: Vereinfacht accounting integration (finance-contacts sync)
|
|
# If set, these override values from Settings UI; those fields become read-only.
|
|
# VEREINFACHT_API_URL=https://api.verein.visuel.dev/api/v1
|
|
# VEREINFACHT_API_KEY=your-api-key
|
|
# VEREINFACHT_CLUB_ID=2
|
|
# VEREINFACHT_APP_URL=https://app.verein.visuel.dev
|